< URI Handling Vulnerability and RBN | Call for Paper: 1st Workshop on Large-scale Exploits and Emergent Threats (LEET '08) >

Trick or Treat: Storm's Halloween

Tonight is Halloween. The Storm Worm has changed - as usually - the social engineering scheme according to the upcoming holiday.
The mails used for propagation now point to a website with a Halloween theme. The website shows a Skeleton and exploits several browser vulnerabilities when the user-agent indicates an exploitable browser. The text "Click here for a spooky good time" gets an interesting meaning in this context :-)
This entry was posted by Thorsten Holz on Wednesday, October 31. 2007 at 13:42. and is filed under malware. You can leave a response, or trackback from your own blog. All new comments are subject to moderation before being displayed.

Trackbacks

Trackback specific URI for this entry

    No Trackbacks

Comments

Display comments as (Linear | Threaded)

    No comments


Add Comment


Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA
 
Submitted comments will be subject to moderation before being displayed.