[LINK] AUSCERT covering its back by reissuing

[Jan Whitaker]

Received (again) today:
Fwd: [NATIONAL-ALERTS] (AUSCERT AL-2006.0059) [Win] - Order WC2905036 Trojan

>===========================================================================
>A  U  S  C  E  R  T                                           A  L  E  R  T
>
>                        AL-2006.0059 -- AUSCERT ALERT
>                                    [Win]
>                           Order WC2905036 Trojan
>                                25 July 2006
>
>===========================================================================
>
>
>OVERVIEW:
>
>         AusCERT is aware of a recent trojan designed to steal confidential
>         information. The trojan is propagated as an attachment to
>         an email with a subject similar to "Order Confirmation ..."
>         or "Your order information ...".
>
>
>IMPACT:
>
>         A user opening and running this attachment will be infected with a
>         variant of the password stealing trojan, Haxdoor[1]. The eventual
>         payload has also been described as Troj/FireSpy-A[2].

Jan Whitaker
JLWhitaker Associates, Melbourne Victoria
jwhit at janwhitaker.com
business: http://www.janwhitaker.com
personal: http://www.janwhitaker.com/personal/
commentary: http://janwhitaker.com/jansblog/

'Seed planting is often the most important step. Without the seed, there is 
no plant.' - JW, April 2005
_ __________________ _