Kaspersky Lab warns of mass-mailing allegedly from McAfee

Internet Business News,  Nov 3, 2006  

• E-mail
• Print
• Link

INTERNET BUSINESS NEWS-(C)1995-2006 M2 COMMUNICATIONS LTD

Kaspersky Lab, an anti-virus company, has intercepted a mass-mailing containing Trojan-Dropper.MSWord.Lafool.v, which has been sent from mcafee@europe.com to make it appear to have been sent from McAfee, an anti-virus company.

According to the company, Lafool.v is a Word document called "McAfee Inc. Reports.doc". The file is allegedly a report about the propagation of malicious programs on the Internet. The document contains a macro written in Visual Basic for Applications. Lafool.v extracts a new modification of LdPinch, a Trojan password-stealing program, from itself, and launches it for execution. LdPinch steals passwords to a number of services and applications, including AOL Instant Messenger and ICQ, and other confidential user data, Kaspersky Lab warns.

Kaspersky Lab believes that McAfee is not involved in the distribution of the Trojan and that the e-mail address used in the messages is fake and used in order to make recipients open infected messages.

((Comments on this story may be sent to info@m2.com))

COPYRIGHT 2006 M2 Communications Ltd.
COPYRIGHT 2008 Gale, Cengage Learning