The Analyst's Diary is a weblog maintained by virus analysts from Kaspersky Lab headed by Eugene Kaspersky. Find out more about the authors of this weblog.
16 August 2006 The Troj/Dloadr-ALM Trojan horse has been spammed out in email messages claiming to come from bbc.italy2006@bbc.com, which can have a variety of subject lines including "Berlusconi la morte", "Berlusconi di terrorismo", "Berlusconi Tragedia", and "Berlusconi di omicidio". A typical email reads as follows: Latest BBC News: Berlusconi was killed by Israeli soldier, Lyvian terrorist. http://www.sophos.com/pressoffice/news/articles/2006/08/berlusconi.html
Berlusconi la morte The source of the spammed emails is bbc.italy2006@bbc.com, and as a part of the social engineering scheme, the attacker makes various subject references including: "Berlusconi la morte", "Berlusconi di terrorismo", "Berlusconi Tragedia", and "Berlusconi di omicidio". The apparent news report informs of Berlusconi's killing by an Israeli soldier and comprises an attached necfotos.zip achieve containing a .gif picture and a .pif malicious file that on execution drops the Troj/Dloadr-ALM trojan horse upon the victim's machine. http://www.google.co.uk/search?q=berlusconi+la+morte&start=0&ie=utf-8&oe=utf-8
new thread
