Beware The Dancing Skeleton

F-Secure has noted that the folks behind the Storm worm have a new social engineering ploy on the go. They are sending out and email with an interactive dancing skeleton.

With an unpatched system, visiting the site will trigger an exploit to automatically download and execute a malicious file. The new filename is halloween.exe. We already detect this as Email-Worm.Win32.Zhelatin.LJ

I’m sure this doesn’t need saying but, I will anyway. Don’t click it if you get one.

Article Link

[tags]Storm Worm, Malware, Virus, Social Engineering, Dancing Skeleton Email[/tags]

Posted by Dave Lewis on October 31, 2007. Filed under Malware. You can follow any responses to this entry through the RSS 2.0. You can leave a response or trackback to this entry