It looks like Veronica Mars and Magnum, PI are getting into the malware business.
Commtouch, an Israeli security firm that specializes in protecting e-mail integrity, says that it has detected a new malware outbreak
that is spread through e-mails claiming to be from private investigators. According to Commtouch, the e-mails tell recipients
that a private investigator has been recording the recipients’ phone calls and that an audio file of one of the calls is attached
to the message. When unwitting recipients download the “call” to their hard drives, their computers become infected with malware.
Read the latest WhitePaper - Enforcing IT Change Management Policy
“Preying on people’s guilty conscience with a virus is an ingenious trick of social engineering,” says Rebecca Steinberg Herson,
Commtouch’s vice president of marketing. “The e-mail messages are written generically enough to fit almost every possible
transgression one might wish to hide, ensuring people will open the attachments.”
Some common subject headings for the malware e-mails include “I’m monitoring you,” “You’re being watched” and “The tape of
your conversation.” Commtouch says that the malware is sent in the form of a password-protected, compressed file that appears
to be an MP3 sound file.
While Herson says she doesn’t know the particular nature of the malware, she suspects that it isn’t meant to overtly damage
most computers but rather to get information from them or turn them into zombie machines.
“Nobody’s bothering to create malware to wreak havoc with the machines anymore,” she says. “Instead, they’re creating malware
that is stealthy and can steal information like passwords through mining information on hard drives.”
Herson also notes that the private detective malware e-mails employ tactics similar to what the early Storm worm malware e-mails used. Those particular e-mails purported to be news alerts that lured recipients into inadvertently downloading
malware by enticing them with sensationalistic headlines such as “Chinese missile shoots down USA satellite” and “230 dead
as storm batters Europe.”
