Welcome!

Virtualization Authors: Jayaram Krishnaswamy, Reuven Cohen, Carmen Gonzalez, Robert Eve, Chris Wiborg

Related Topics: Virtualization, IT SOLUTIONS GUIDE

Virtualization: Article

"Jacko Attempts Suicide" Spam Scam

Designed to Fool Users: Trojan Marches In, Attempts to Hijack PCs

Sophos' global network of virus and spam analysis centers have warned of a spam campaign that claims that Michael Jackson has attempted suicide in an attempt to lure innocent computer users into being infected by a Trojan horse.

An example of the email
The email claims that Michael Jackson has attempted to commit suicide. But clicking on the link will cause infection.

Sophos has identified hundreds of the spam messages being sent, preying on intense media interest in the trial of the controversial popstar. The spam emails have the following characteristics:

Subject: Re: Suicidal aattempt

Message text:
Last night, while in his Neverland Ranch, Michael Jackson has made a suicidal attempt.

They suggest this attempt follows the last claim was made against the king of pop. 46 years old Michael has left pre-suicid note which describes and interpretes some of his sins.

However, when users click on the link they are taken to a website which secretly installs malicious code onto their PCs.

"If you click on the link the website displays a message saying it is too busy, which may not surprise people who think it might contain genuine breaking news about Michael Jackson," said Carole Theriault, security consultant at Sophos. "However, this is a diversionary tactic - because behind the scenes the website is downloading malware onto the user's computer without their knowledge."


MJ, Before All the Fuss

Experts at Sophos have analysed the code downloaded by clicking on the link, and determined that it itself attempts to download another Trojan horse which Sophos detects as Troj/Borobt-Gen. Sophos PureMessage has been updated to detect the spam message automatically at email gateways.

Sophos notes that this is not the first time that the troubled pop star has been exploited by virus writers and hackers attempting to spread their malware. In October last year messages were posted on the internet claiming that incriminating home videos belonging to Jackson had been discovered - but clicking on the link infected web surfers with the Hackarmy Trojan horse.

"The sick minds behind viruses and other malware often exploit celebrity names and news stories in an attempt to infect as many people as possible," continued Theriault. "All computer users should be very careful about clicking on weblinks in unsolicited email or launching unknown attachments."

Sophos recommends companies automatically update their corporate virus protection, and filter attachments which may contain malicious code at the email gateway with a consolidated solution to defend against viruses and spam.

More Stories By Security News Desk

SYS-CON's Security News desk trawls the world of security for news of software, hardware, products, and services that seems likely to be of interest to infosec professionals and summarizes them for easy assimilation by busy IT managers and staff.

Comments (2) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
JackoRules 06/13/05 06:32:57 AM EDT

This is the lowest of the low. Will this man never get any peace, even from hackers?

sr 06/10/05 05:00:20 PM EDT

Jackson has enough problems without this. One more indignity!