New Malware Attacks - Tis the season to be careful
F-Secure has published 3 new malware threats that use holiday themes to trick users into opening them:
Stration (Warezov) - Happy New Year
http://www.f-secure.com/weblog/archives/archive-122006.html#00001059
QUOTE: A new Warezov spam run is underway, using a "Happy New Year" postcard as a disguise.
More Christmas-themed malware
http://www.f-secure.com/weblog/archives/archive-122006.html#00001058
QUOTE: Now there's a backdoor called Christmas_Puzzle.exe. This one uses a rootkit to hide it's presence on a system. We detect it as Trojan-Spy.Win32.Ardamax.e. As a decoy, this one shows a Christmas-themed jigsaw puzzle game on screen. And then there's a Powerpoint file called Christmas+Blessing-4.ppt. This one uses MS06-012 or a related vulnerability to drop and execute two embedded programs. As a decoy, the exploit has been embedded in an innocent Christmas-themed PPT slideshow that has been making rounds previously.
Christmas.EXE
http://www.f-secure.com/weblog/archives/archive-122006.html#00001057
QUOTE: When run, this IRCBot variant will try to download various malicious executables from web servers. As a decoy, it shows this Christmas-themed image. Obviously, a gift that keeps on giving. To be avoided.