Katrina News Email Scam

[TrogL]

http://www.websensesecuritylabs.com/alerts/alert.php?AlertID=272

Websense Security Labs™ has received multiple reports of a new email scam, which attempts to lure users into visiting a malicious website. The message gives a brief news update on Hurricane Katrina and provides a link to the full news story. This website contains encoded JavaScript, which attempts to exploit two HTML Help vulnerabilities. Microsoft has addressed these vulnerabilities with http://www.microsoft.com/technet/security/bulletin/MS05-001.mspx.

In the event that either of the exploits are successful, a Trojan downloader is placed on the workstation. The Trojan begins downloading a second malicious file, which is also a Trojan. The second Trojan has backdoor functionality that gives the attacker complete control of the workstation.

The technique, exploit, and Trojan used in this attack are nearly identical to the Iraqi News Email Scam that began circulating in early August.

[Oreegone]

1. Anybody that does that

Should be put in a very small room with no access to a computer for the rest of their lives.....what f*cking sad excuses for humans.

[mahatmakanejeeves]

2. I beg to differ.

Anyone who does that should be put in a small room with unlimited access to computers, as long as they are all running Windows.

[ret5hd]

3. ha! exactly! let them swim in their own waste!