Received a clever virus mail today that shows that spammers / virussers / trojan-horse makers and other minorities may perhaps have at least a couple of braincells between them…
The mail
| Subject: DEVINE RETRIBUTION Message: Dear friend. I have a juicy photo of your girlfriend. She has not satisfied some conditions of our agreement and I have to send you this photo as a revenge. ENJOY! Here is my phone number Tel. 521-657-08418. Now you can find me anytime. Attachement: Foto.zip, inside which a file called Foto1.jpg .exe |
So lets have a close look at this
The subject: ok some kind of religious scare for the more gullible recipient? will make some people nervous.
The message: this is very clever. playing on the jealousy aspect. He makes some assumptions here though, first that the recipient is male, second that the recipient is hetero, third that the recipient has a girlfriend. Assuming the recipient matches all assumptions….. its very clever. Jealousy is a very heavy emotion and something many people have a problem with. When your having an heavy emotion reason tends to go out the window resulting in stupid choices like opening the attachment.
The attachment: Also cleverly done. Of course it has to be zipped else there is a high chance of it being blocked. inside the zip is a very clever file tho. The clever idiot sending this has changed the icon to a jpg icon. and notice all the spaces in the name? this makes it look somewhat like a jpg image when its actually an EXE file. 2 mistakes here tho: 1. winzip isn't so easily fooled by the embedded icon and just shows an application icon, but hey, many ppl don't use winzip, in the regular windows zip viewer you would see the jpg icon. 2. if you set viewing mode to thumbnails/tiles you see a very big jpg icon instead of a photo thumbnail… woopsie there 
Looking at the code of the exe i would say it does something like install porn pop-ups in your browser or some other such nastiness that nobody wants. of course i didn't actually open it to try this out.
All in all i would give an 8 out of 10 for effort and innovation (but they are still a bunch of pointless wastes of oxygen usage)
September 23rd, 2008 at 16:40
Clever waste of brain cells. I would have to say that even if the receiver is not a male and does not have a gf, curiousity would be a killer factor here ^^
But if even the most unattentive ppl don't get the red flag when they see "Foto1.jpg" as title (when most camera taken pictures have numbers and dates in the title unless deliberately changed) then clearly they deserve the virus :)).
Btw, the author of this is not english … notice the way "Foto" is spelled. that's the way we spell it in romanian and a few other latin languages, hehe. I think the author is a rising 17/18 year old computer geek / hackerwannabe.
.. just fun assumptions here aniwho
September 23rd, 2008 at 21:55
dunno about 17/18 , proberly a 40yo virgin living in his mommas basement. or a 14yo scriptkiddy who thinks he will get laid if he can install a trojan somewhere ~_~