| Home | The Book | Training | Events | Tools | Stats |
Web log archive.
A Dispatch
June 25, 2008
"You look really stupid"Yes, that is the Subject: line of a malware lure. It arrives appended by your email account name. Thus, if your email address is johndoe@example.com, the Subject: line reads:
You look really stupid johndoe
The message body is simply a URL to a file named video1.exe, located on a hijacked web site. If your email client turns that URL into a clickable link, then clicking it (or copying and pasting the URL into your browser) begins the download of that Windows executable file to your machine. If you fear that the video caught you in a less-than-intelligent act, and you open the file on your PC, you've just enlisted your PC into a botnet army.
Congratulations.
NOT!
Posted on June 25, 2008 at 09:57 AM