Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.
Security Response

We All Knew It Was Coming: A Michael Jackson Mass Mailing Worm

Created: 30 Jun 2009 17:33:08 GMT • Updated: 23 Jan 2014 18:34:30 GMT
Symantec Security Response's picture
0 0 Votes
Login to vote

Symantec Security Response has discovered a mass-mailing worm using Michael Jackson's death as a bait. The worm sends out spam emails with the subject “Remembering Michael Jackson” and an attachment named “Michael songs and pictures.zip.” The .zip file contains another file called “MichaelJacksonsongsandpictures.doc.exe,” which is a copy of the worm that is executed on the user’s machine when the file is opened.
 
Symantec has detection for this worm as W32.Ackantta.F@mm. It is important to keep in mind that W32.Ackantta.F@mm spreads not only through email, but also via removable drives using autorun.inf.
 
Below is a snapshot of the email that W32.Ackantta.F@mm sends out:

imagebrowser image