Security Bytes

Jul 11 2008   10:06AM GMT

New media Trojan on the prowl

Robert Westervelt Robert Westervelt Profile: Robert Westervelt


Researchers at Secure Computing say they’ve spotted a new Trojan affecting MP3 and Windows Media Audio (WMA) files, as well as Windows Media Video (WMV) files.

The Trojan is spreading quickly to users of P2P file sharing programs such as Limewire, Secure Computing said. When an infected media file is opened, the Windows Media Player is redirected to a malicious site hosting a fake codec and malware. They describe how the media files are infected in the illustration below.

A similar attack was detected in May when McAfee detected infections on more than 360,000 machines.

Ultimately, end users need to be educated to stay away from sites hosting files that need a serial key to crack protection.
Infection process

 Comment on this Post

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

Share this item with your network: