Fergie's Tech Blog

F-Secure: More PnP related malware

Katrin writes in the F-Secure "News from the Lab" Blog:

A new trojan that use pnp vulnerability has been spammed today. It disguises itself as removal tool for Zotob and other bots. The spammed email contains the trojan as MS05-039.exe attachment and the email subject is "What You Need to Know About the Zotob.A Worm". If you decide to search the web for more information on this text, the first hit is Microsoft's page about the Zotob incident last week. Also, the senders email address is spoofed so it looks like it comes from Microsoft.

posted by Fergie @ 8/24/2005 07:23:00 PM