Symantec recently warned PC users of a weekend spam run, which is making an attempt to trick recipients into making a download of the evil “Storm Trojan” by attaching files, disguised as videos of a phony missile strike by the U.S. against Iran. Symantec says the unwanted e-mail, which comes with provocative subject lines that consists of “Missle [sic] Strike:
The USA kills more then [sic] 20000 Iranian citizens, USA Declares War on Iran, and USA Just Have Started World War III, is comprised with attached executable files like video.exe and readme.exe.
Symantec researcher John McDonald on the company’s security response team’s blog, was quoted as saying,
The underlying threats are actually nothing new. They are simply minor variants of Trojan.Peacomm and W32.Mixor, which have been repacked in order to avoid existing detection and appear to have been largely successful at that.
Symantec maintained further that executable file attached to the war-scare spam is in fact a worm that makes download and deploy both Trojan horses. As indicated by the data from MessageLabs, Peacomm - also called Zhelatin - was wide spread piece of malware in the last 24 hours. MessageLabs said that it brought about 32 per cent of all nasty code being disseminated globally.
Up till now, other security vendors, F-Secure, Fortinet, Kaspersky Lab and Sophos, had rolled out updated signatures to spot the tweaked threat. Peacomm, which also nicknamed “Storm Trojan,” is infamous as an eruption in January and February finished up touting the prize as the largest malware attack since mid-2005.
