Storm clouds Valentine's Day inboxes

The Storm worm is showing no signs of letting up in its Valentine's Day assault.

Researchers from major security firms have uncovered thousands of spam emails spreading the Trojan in the days leading up to 14 February.

The worm has been spreading since January in the form of email greeting cards with subjects as 'You Stay in My Heart' and 'Thinking of U All Day'.

Users are taken to a fake e-card site and asked to download an application called 'valentine.exe'. The executable file is a Trojan which will add the user's computer to the huge Storm botnet.

The botnet has become one of the most formidable security threats on the internet, and researchers suspect that Storm's creators are now renting out the infected machines.

Storm has used fake holiday email greeting cards as a way for spreading the infection since it emerged in early 2007.

Symantec researcher Silas Barnes noted in a company blog that Storm is hardly the first security threat to pose as a holiday greeting.

"Holiday theme-based threats have enjoyed great success since at least 2000, and every year attackers are successful in compromising machines via constructed email messages," Barnes wrote.

"While the messages change from year to year, the mitigation strategy remains the same, which includes keeping antivirus signatures up-to-date and treating all emails carefully."

See also:

Russia emerges as spam superpower

Dramatic rise in junk email from compromised Russian computers  11 Feb 2008

Mayday worm takes on Storm

Hackers after botnet crown, researchers warn  08 Feb 2008

Spear phishers target US students

Attacks disguised as 'database update'  04 Feb 2008

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!