Storm Trojan dupes users with Halloween jig

The latest holiday-inspired spam by the botnet-building malware in progress

The Storm Trojan is flooding e-mail in-boxes with a Halloween spam blitz, security companies said Thursday. This is just the latest example of the bot-building malware's knack of capitalizing on current events to dupe people into infecting their PCs.

The newest campaign arrives in messages with subject heads such as "Dancing Bones" and "The most amazing dancing skeleton," said Abingdon, England-based Sophos PLC in an alert posted on its site. The messages include a link to a malicious URL posing as a Halloween-themed site; once there, users can click on a file, "halloween.exe," which purports to be a dancing skeleton game, but which actually fires up Storm in the background.

Visitors running unpatched machines can also be hit by Storm after a multistrike exploit package pings the PC for vulnerabilities and, if it finds one, compromises the computer and as the slips in Storm.

"This is just the latest incarnation of the poisoned e-card attack, also known as Storm, which has dominated the malware scene for months," Graham Cluley, a Sophos consultant, said in a statement. "The gang responsible are experts at choosing topical disguises or crafting alluring e-mails."

Storm's makers have relied on current events and holidays since the Trojan first appeared in January as an attachment to a message broadcasting news of that month's major windstorm in Europe. Since then, Storm has piggybacked on messages hyping everything from the Fourth of July to Labor Day.

The malware has become famous in security circles for its use of social engineering tricks. More than two months ago, Symantec researcher Hon Lau acknowledged the hackers' ability to craft tempting messages. "They have a knack for latching on to the latest newsworthy events and capitalizing on the public interest in them," Hon said then. "And if no newsworthy events are happening at the time, then they will just make them up."

All of Storm's energies are devoted to hijacking PCs so it can use them as bots in a network, or botnet, of hacked machines. Recently, researchers have reported that the Storm botnet may be splitting up into smaller segments, perhaps in preparation for sale to others who could use them for spamming or other schemes.

Most antivirus products have signature definitions in place that detect and delete the Storm Trojan used in the Halloween attack, according to London-based Heise Security.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Gregg Keizer

Computerworld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?