Application security, Threat Management, Malware

Spam lures to eclipse “videos” laced with malware appear

Websense has warned that spam emails have emerged which attempt to dupe recipients into downloading videos of Wednesday's total lunar eclipse but instead deliver an information-stealing trojan to the user's PC.

The bogus eclipse messages are arriving with subject lines including “Shocking video with Total Moon eclipse,” “Total Moon Eclipse Video on NASA TV,” “Lunar Eclipse Video,” and “Your guide to the total lunar eclipse.”

The perpetrators of the astronomy-related spam appear to have been in a hurry to take advantage of interest in this week's lunar eclipse, because although the subject lines for the messages refer to the lunar eclipse, an HTML box within each message touts “Solar eclipse stock video from all around the world…Get Eclipse Video now!”

According to the Websense alert, there is no exploit code contained in any of the sites linking to the eclipse spam messages, and users are prompted to confirm if they want to run the code for the bogus video link.

 

An In-Depth Guide to Application Security

Get essential knowledge and practical strategies to fortify your applications.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds