Welcome to Super Antivirus Blog

I am a Jedi. 我：http://sinaurl.cn/hiWzC 化繁成简… 破茧成蝶 Panda Cloud Antivirus 首款基于云的免费防病毒软件

Fake IRS Notifications

Fake IRS notification e-mails have been in circulation on the Internet over the past few weeks. We've monitored the situation closely and have observed 30 active domain names currently spreading the Zeus trojan affiliated with the spam campaign, as well as 300 links used in the attack over the past month. The e-mail arrives as a notice of unreported income and directs the victim to click on a link (E.g. http://www.irs.gov.malwaredomain.com).  When clicked, the victim arrives at website designed to look like an official IRS page.    

The website attempts to legitimize itself by referencing the receivers name in the Taxpayer ID field and in the download link. Once the malware is accessed, the zeus trojan is silently installed on the victim’s computer and begins to intercept communication with banking sites in order to facilitate financial fraud.

Spam as a financial tool (II)

The Mexican one was not a success as far as we can see. But we are seeing a lot of similar spam messages everyday, here is an example:

[imageattachment]

Spam as a financial tool

Everyone knows that spam is used to advertise all kind of products and that hackers use it in other ways (installing malware through exploits, etc.). The message usually links to an external site, but it's not always like that. We have recently seen spam messages about a deal from a Canadian company. The message was an advice to buy stocks from that company on Thursday, 21st September 2006.

How can we measure the success of the message? Well, let's take a look at the stock prices of that day:

[ImageAttachment]

As we can see, someone could earn a lot of money buying stocks, sending this kind of spam and selling all the stocks the same day, when everyone else is trying to buy. I have just received a similar one. This time it is a Mexican company, let's follow it up, tomorrow I'll publish the evolution of these stocks.