Lafool Trojan Masquerades as McAfee Doc
Friday November 3, 2006
According to antivirus vendor Kaspersky, a variant of the Lafool Trojan embedded in a Word document was seeded in an email pretending to be from mcafee@europe.com. The attachment carried by the email is named "McAfee Inc. Reports.doc". Kaspersky analysis of 'Trojan-Dropper.MSWord.Lafool.v' indicates that it drops a variant of the LdPinch password-stealing Trojan which steals login credentials for AIM and ICQ as well as other applications. Security researchers speculate the slolen credentials may be used to seed further malware by sending malicious links and attachments to buddy lists associated with the stolen accounts.


No comments yet. Leave a Comment