Jump to navigation
| Wednesday, November 02, 2005 | |
Here's one targeted at E-Gold users. The ploy is that the sender wants you to execute a special program attached to the email. Doing so will infect your computer with the PWS-Banker.k.gen trojan. Expected result is to lose the funds in your E-Gold account and I'd expect it'd manage to get other sensitive information from your computer.
Here's the email I received:
"The recent cases of fraud, unauthorized withdrawal of cash from our clients' accounts and recurred attempts of hackers to access our server forced us to implement a new security system. The special program will ensure safe connection of your computer to our server by means of a unique encoded key, specially generated for each account. Only the combination of your login, password and the key will allow you to access the system. The program is enclosed to the message and doesn't need any installation. By one click you will be connected to the server and the program will generate the key. After that you will enter your account from Internet Explorer, which is absolutely safe. You will be signed out of the program automatically after closing the window. See the detailed operational instruction enclosed to the program.
We have to warn you, that if you want to be the user of our system in future, you'll have to accept our rules and to use this program. Otherwise please call the numbers below to withdraw your funds. For the detailed information please enter our site or use our hot line to contact us by phone."
This is a pretty poor attempt to get you to compromise your computer, but some folks will fall for it. No legitimate financial institution will require you to open an attachment, nor will they send you a link to click on asking you to validate your account. It's called "phishing" and if you take the bait, you will be filleted.
According to McAfee, there are more that 250 Banker trojan variants. The zip file that McAfee VirusScan caught in my email was name "connect.zip". You may receive a differently named file and maybe even a better worded email. Regardless, do not open attachments received via email.
Comments
Add Comments
|