Hackers go all out with PayPal spam phishing scam Trojan

Full marks for effort

By Jo Best, 16 January 2004 16:30

NEWS A new virus has been found in the wild that manages to combine users' favourite bugbears - spam, phishing, PayPal scams and viruses - in one handy malware package.

The virus arrives via an email, which is thought to have been distributed through the usual spamming channels, that purports to come from eBay's online-payment service, with the subject "PAYPAL.COM NEW YEAR OFFER". The email text goes on to explain that users can get their hands on a few bob if they register with the site by - surprise, surprise - handing over their financial details.

If the recipient opens the email attachment and launches the file it contains, the Trojan will download and run a new variant of the Mimail virus, Mimail N, which started doing the rounds last week. The virus goes on to harvest more email addresses from the user's hard drive and sends itself out every time the user opens Windows.

The virus is thought to be the work of Russian virus writers, as the site that the virus is downloaded from and the 'PayPal' forms sent back to originates in that country.

The change in virus-writing strategy could be an attempt by writers to bypass unwitting users' virus protection, but antivirus firm Sophos has advised companies to block executable code that arrives via email so that the virus is killed before it reaches users.

Comments

There is 1 comment. Join the discussion

  1. 1. ED Denson

    I've been gettting and deleting as many
    as 3 ebay phishing emails a week, for many weeks. They vary in what they say and ask for but it is always passwords and credit card numbers. We'll have to have global police to stop it, or automatic delete buttons.

Post your comment

In order to post a comment you need to be registered and logged in.

Log in or create your silicon.com account below

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy.

Questions about membership? Find the answers in the Membership FAQ