NOW READ THIS
("Security Advisory")



Submitted by: Bill Hickey
NCVA List Master

NRT-0163 Electronic Postcard Delivers Trojanized Message:


Sophos has warned of a spam campaign that poses as an electronic postcard, but attempts to infect users with a web-based Trojan horse designated "Mal(slash)Zapchas(dash)A" according to the Sophos web site. The malicious emails have the subject line: "You have received a postcard!" and invites users to click on a link to receive the card. Users who follow the link are taken to a downloadable executable file (postcard(dot)exe) designated to allow remote hackers to gain access to the infected Windows computer. "Because this email doesn't arrive with an attached file, some may be fooled into believing it is harmless. But, in fact, this is how more and more malicious attacks operate today - using a mixture of email and the web to deliver a dangerous payload to the desktop," said a senior technology consultant for Sophos. Sophos said it first detected Mal(stroke)Zapchas(dash)A in February 2007.

(www.sophos.com 01MAY07)



Last Modified: Sunday, 06-May-2007 09:12:13 EDT