Video Screencast Help
Security Response

Assassination Fascination

Created: 27 Dec 2007 08:00:00 GMT • Updated: 23 Jan 2014 18:43:27 GMT
Vikram Thakur's picture
0 0 Votes
Login to vote

t’s been less than 24 hours since the former Prime Minister ofPakistan was assassinated. As expected, the malware authors anddistributors have already begun exploiting the morbid curiosity aboutBenazir Bhutto's death as a lure to spread their malice.

A simple search with terms such as "pakistan prime ministerassassination" yields results that include pages like the one shownbelow:

bhutto_youtube.gif

As some would expect, clicking on some of these links will mean that the old (technique-wise) ActiveX message box will appear:

bhutto_activex.gif

The problem with many of these links is that the ActiveX Object ismalicious. For example, following the link in the above image downloadsa malicious file hosted on a server in Denmark. The maliciousdownloaded file is detected by Symantec products as Trojan.Emcodec. It just goes to show, even death isn’t sacred to some.