Experts at SophosLabs have alerted against a Trojan horse that has been spammed out to email addresses posing as a Digital Photograph. The following characteristics of the email messages, combined with Troj/Dloadr-AKX Trojan horse, are as follows:





Subject line: My best photos! or the best pictures of us. Just take a look, I am excited! or Wanna see? or You’ve asked for pictures. See this. Message body: Hi, Honey My best photo ever! Xoxoxo Attached file: photos.zip Inside the ZIP file is another file called DSC00342.jpg .exe.



Sophos claims the executable file to be a Trojan horse, which has been developed to download more pernicious code from the internet, but poses itself as a JPG graphic by making use of a dual extension and interleaving manifold spaces into the filename.



Senior technology consultant at Sophos, Graham Cluley said,

Opening the file will not show you a digital picture, but instead blast opens a hole in your PC’s security.” “Anyone unfortunate enough to run this program is running the risk of allowing hackers to gain access to their computer to spy, steal and cause havoc.

This Trojan horse reminds computer users that keeping anti-virus software up-to-date is essential,” “Regular anti-malware updates combined with sensible safe computing policies and strong email policy at the gateway reduces the risk of threats like this.

Sophos advises all PC users to make sure that they are making use of an anti-virus product, which is automatically configured to update firewall software, security patches and itself.



Recently also Sophos had cautioned against the spyware Trojan horse of Russian beauty, which is aimed at committing theft of sensitive information by displaying the love match pictures of the beautiful women. The malware of the Russian beauty commits theft by keeping tabs on the keypresses from the infected computers, and letting remote hackers steal bank accounts and identity theft.



Considering the rampant attack of the malware, Sophos recommends firms to safeguard their email gateways with a consolidated solution to protect against spyware, viruses and spam, additionally applying an email policy that makes filters of the unwanted executable code at the gateway.



Read