An email offering a McDonald’s discount menu, new bait to infect users

PandaLabs, Panda Security’s laboratory for detecting and analyzing malware, has detected an email message claiming to be a special Christmas offer from McDonald’s, but which really spreads the P2PShared.U worm.

The email subject is “Mcdonalds wishes you Merry Christmas!”, while the message text reads as follows:

“McDonald’s is proud to present our latest discount menu. Simply print the coupon from this Email and head to your local McDonald’s for FREE giveaways and AWESOME savings.”

To make the message look more authentic, the sender’s address shows the “mcdonalds.com” domain. The message also contains a drop-down menu for the targeted user to choose their country, a cunning detail given the fact the emails claim to come from a multinational company such as McDonald’s.

This malicious code also uses a different set of emails to spread. In this case, the message subject is “You have recieved (sic) a Hallmark E-Card from your friend”.

The message text prompts users to download and run the attached message in order to open the card.

In both cases, if the user follows the instructions in the email, downloads the attachment and tries to open it, they will actually be downloading a copy of P2PShared.U and will install it on their computer.

“These emails use social engineering in different ways. Both emails attract users’ attention with Christmas-related subjects. However, the first email also exploits the financial crisis by inviting users to download a coupon for gifts and savings; a very effective lure”, explains Luis Corrons, technical director of PandaLabs.

Once on the computer, the worm sends out emails with the same subject and appearance to other users.

Finally, it copies itself to folders of various P2P file-sharing programs (eMule, LimeWire, Morpheus, etc.) with names relating to security software, image editing programs, program cracks, etc. This way, any user that tries to download any of these applications will be actually letting a copy of the worm into their computer.

To avoid these infections Panda advises users not to open messages from unknown senders, and in particular, not to open any attachments they might contain or click any links in them.

Source: PandaSecurity

Prevent your system being hijacked

If you are like me and do a lot of surfing on the net, you will certainly come across some real nasties that try to download stuff onto your pc that you don’t want, or try to hijack your system.  Just be wary.

I have come across a neat tool that will strengthen the security on your pc  and actually blocks the malaware. Download the Javacool Spywareblaster 4.1 and watch the short video on the right as the lady explains the features.

1. Click on UPDATES and then CHECK FOR UPDATES.
2.Click on PROTECTION STATUS  then at the bottom ENABLE ALL PROTECTION.
3.Click on TOOLS and then HOSTS SAFE and then at the bottom CREATE BACKUP.
4.Click on SYSTEM SNAPSHOT then GO to CREATE SNAPSHOT. 
That’s all there is too it. Simple.

Follow the few simple steps to set it up, these are most important. Make sure that you regularly do updates to keep yourself protected. This little program is a good addition to your security arsenal.

As issued by PandaSecurity.com

Game lovers everywhere

‘World of Authentication

The creation of malicious code aimed at stealing passwords for online games is on the rise, especially those aimed at World of Warcraft and Lineage players. Most of these games offer certain functions, objects and even money can that can only be obtained as users advance through the different levels. As a result, some less skilled users are willing to pay for items they have been unable to obtain through playing the game.

Fully aware of this, cyber-crooks are creating malware strains to steal passwords for these games in order to sell avatars, objects, etc. to the highest bidder.

This situation has led video game companies to react. Last week, Blizzard Entertainment, the company behind such popular games as World of Warcraft, LineageWarcraft, Diablo and StarCraft announced the launch of an authenticator for World of Warcraft players at the 2008 Blizzard Entertainment Worldwide Invitational.

“It’s good to see that video game companies have started to care about users’ security, as the situation is becoming really dangerous”, explains Luis Corrons, Technical Director of PandaLabs.

Play safe!

Zo Nicholas

FREE Trial

XoftSpy is a great little program that will keep your computer running
free from nasties - not like some of those antispyware tools out there that cause more problems - and come packed with viruses, trojans and worms. This is a clean product - fully supported and updated regularily.

All-in-One Solution*

Remove Spyware, Adware
Stop Pop-ups
Kill Trojans, Worms, Viruses
Clean Registry & Program Errors
Remove harmful registry keys and files
Speed-Up your computer
Destroy harmful hijackers
Helps prevent identity theft
Clean & Optimize your PC

XoftSpySE detects Spyware, Adware, and other Parasites:  
Download the Free XoftSpySE Scanner