Mytob Worm Phishing Variant

***
11-Jun-2005

The latest Mytob worm is using phishing tactics to propagate the web.

***

Latest variants of the Mytob worm are implementing phishing-style techniques to entice surfers into downloading the worm from websites.

Previously, the worm has propagated by way of email attachments and when downloaded, the worm installed itself automatically on the computer and opened a "backdoor" link to open up the infected PC to remote attacks. The worm then used a proprietary email system to forward itself to other email addresses stored on the infected PC. Latest versions of the worm now send out a spoofed web link to a site which hosts the worm.

These emails appear to originate from the recipient's IT department or their ISP. Email recipients are also informed that a security flaw has been discovered on their machine and they should confirm their account.

A Sophos representative described the problem the new variant causes. "By using this disguise new versions of the Mytob worm attempt to lure the unwary into clicking on a dangerous web link. This is a real headache for IT departments who often struggle to get their users to follow instructions."

Source: http://news.zdnet.co.uk/internet/security/0,39020375,39202747,00.htm - ZDNet

MillerSmiles News

11/06/05

Talk about this article on our phishing news discussion forum

---

PRESS/MEDIA ENQUIRIES

MillerSmiles is the web's dedicated anti-phishing service. Launched in 2003, the site has become one of the most trusted internet security related websites on the internet.

For enquiries relating to this story or any other part of the MillerSmiles website please email the MillerSmiles team here

If you are interested in business and partnership opportunities with MillerSmiles please email us here