full-disclosure - First WMF mass mailer ItW (phishing Trojan)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <43F4945C.3010004@messagelabs.com>
Date: Thu Feb 16 15:04:07 2006
From: Vulnerability at messagelabs.com (Vulnerability Management)
Subject: First WMF mass mailer ItW (phishing Trojan)

Hi Gadi,

Gadi Evron wrote:
> The first worm (mass mailer) to (ab)use the WMF 0day is now spreading in
> Australia.

[...]

 > The emails themselves do not contain the payload, but rather a URL to
 > sites that will infect users.

How can this be called a worm? AFAIK, malware that needs human 
intervention to spread is a trojan, not a worm.

\a

(Personal opinions only)

-- 
Andrew Simmons
MessageLabs Security Team

MessageLabs: Be certain

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________