New Trojan discovered by Trend Micro

Nov 14, 2007 07:43 GMT  ·  By

Security vendor Trend Micro discovered a new Trojan horse which attempts to install on users' computers through malicious spam messages delivered by email. The TROJ_AGENT.AAPN affects most versions of Windows including 98, ME, NT, 200, XP and Server 2003. Trend Micro reported that the Trojan has medium damage potential and medium distribution potential but rated the overall risk rating as low. What's more interesting is that the Trojan comes with a MP3 icon to trick users to open it but in fact, it is an executable file which attempts to install malicious content on your computer. It seems like the email attachment is usually named call234.mp3 and after installation it automatically creates a file called win32.exe placed in the User Temp folder. "This Trojan arrives as an attachment to email messages spammed by another malware or a malicious user. It may be downloaded from remote site(s) by other malware," Trend Micro wrote in the advisory released today. "It may be dropped by other malware. It may also be downloaded unknowingly by a user when visiting malicious Web site(s)."

And now the juicy part. The spammer claims he's a private detective who's monitoring your telephone and even included an audio file to prove you that he recorded your phone calls.

"Hello, I work in a private detective agency. My name is not important now. I'm warning you that I'm going to watch you and monitor your telephone line. Do you want to know who paid for shadowing you? Expect my next e-mail. P.S. I know, you don't believe me. But I think that the record of you yesterday's telephone conversation will assure you that everything is real. The record is in archive. The password is 123qwe," the spam email reads.

Just like always, you're advised to avoid opening email messages coming from untrusted sources and refuse downloading unsolicited attachments which could infect your computer.