A new malicious campaign in progress

Nov 21, 2007 10:23 GMT  ·  By

Several security vendors on the web identified a brand new dangerous email scam which attempts to lure recipients to click on infected attachments which could harm their computers. The messages claim to be sent by the US Department of Justice and inform the reader that somebody filed a complaint against the company; but what's more impressive is that the emails include most users' details such as name and company info. In addition, the unsolicited messages ask the readers to click on an attachment which is supposed to be the original complaint received by the US DoJ. Actually, the attached file is a Trojan horse which might serve as a simple way to deploy additional dangerous software on the victims' systems.

According to Websense Security Labs, none of the major antivirus solutions available on the market managed to discover the threat so you're pretty vulnerable to attacks. However, the security vendor already included protection into its technology - so, in case you're a Websense customer, you're fully protected against it.

The attached infection comes with the .scr extension which is usually assigned to scripts or to Windows screen saver files. However, this format has often been used by the attackers in their attempt to gain control over a system or just to be able to deploy additional software onto it.

Just like usual, I would recommend you to keep your antivirus solutions up-to-date with the latest virus definitions, but since some of the products are not able to defend your computer yet, I'm not sure if it's useful anymore. However, just as a security measure, please do so as the security vendors are always working to protect the consumers by releasing updates every once in a while.

If you're currently looking for a security product, you can get one from the utilities listed on Softpedia, all of them being available right here.