Security News Collected by AWSODA-SYSTEMS: TrendLabs | Malware Blog - by Trend Micro - Bogus ‘Balance Checker’ Tool Carries Malware

Sunday, November 15, 2009

TrendLabs | Malware Blog - by Trend Micro - Bogus ‘Balance Checker’ Tool Carries Malware

Here are the latest updates for security-news@awsoda.net

"TrendLabs | Malware Blog - by Trend Micro" - 1 new article

Bogus 'Balance Checker' Tool Carries Malware

Trend Micro threat analysts received samples of spammed messages that purports to come from mobile phone companies, Vodafone and Verizon Wireless. The email messages carry the subject, "Your credit balance is over its limits" and inform users that their credit balance is due. To be able to review the payments, users should employed the balance checker tool attached in the email.

When users opened the attached .ZIP file, they won’t find any ballance checker tool and instead will get a malicious file (balancechecker.exe) detected by Trend Micro as TSPY_ZBOT.SMP. TSPY_ZBOT.SMP steals online banking credentials such as usernames and passwords. This stolen information may be used by cybercriminals for other fraudulent activities. It also disables the Windows Firewall and has rootkit capabilities for difficult detection and removal.

Users are strongly advised not to open any suspicious-looking emails even it comes from a known source. It also good to verify first any email coming from your mobile services provider just to be sure if it is legitimate or not. Trend Micro protects users from this attack via its Trend Micro Smart Protection Network™ that detects and blocks spammed emails and malicious files.

Post from: TrendLabs | Malware Blog - by Trend Micro

Bogus ‘Balance Checker’ Tool Carries Malware