BitDefender: Trojan Now Uses Hotmail, Gmail As Spam Hosts Half A Million Spam Accounts - And Counting

Following a joint effort of BitDefender and Yahoo security teams, the efforts of the criminals behind Trojan.Spammer.HotLan to generate and use Yahoo accounts to send spam seem to have been stymied. However, the malware authors have switched to generating Hotmail and Gmail accounts to send their spam, apparently having found a way of bypassing the captcha systems of the two webmail providers.

The captchas are supposed to ensure that it’s humans, not computers trying to create the account, in an effort to stem exactly this kind of service abuse.

Every active copy of the HotLan trojan tries to create an account, sending off the captcha image in an encrypted form to a spammer-controlled website, wherefrom a solution is sent back to it and entered in the appropriate field. Then, the trojan pulls encrypted spam e-mails from another website, decrypts them and sends them to (presumably valid) addresses taken from yet another website.

"There were 514 thousand Hotmail accounts created as of Friday, as well as about 49 thousand at Google" commented head of BitDefender Antivirus Lab Viorel Canja, "However, it is worth noting that while most of the Hotmail accounts are operational, Gmail accounts get blocked pretty fast, usually about a couple of days after being created."

ADMIN ::: site web et template SPIP ::: Oxymium :::

IT security solution(s), IT security , anti virus, IT security protection, virus, job offer/employment , network security news, network security , IT security magazine, virus alert, special report on IT security/IT security feature, IT security project, biometry, telecom network security, spyware security/spyware protection, trojan information, trojan, IT intrusion, spam, email security, anti-spam software, firewall security/firewall protection, firewall, telecom security, hackers/cyber criminals, trojan horse, storage, SAN, FNA?, IT backup