New Microsoft Security Trojan Horse Detected

In early April, a new campaign by malicious hackers began using e-mail messages that appeared to come from Microsoft Corporation to get recipients to visit a Web page that uploads a Trojan horse remote-access program called DSNX-05. The malicious messages had subject lines such as “Update your windows machine” or “Urgent Windows Update.” A link in the body of the e-mail would take users to a site that resembles the actual Microsoft update page, but it is actually a site operated by the attackers that installs the Trojan horse.

Those who launched the attack may have been trying to capitalize on Microsoft’s recent Windows software security patch release.

E-mail users should always be on guard when receiving any unsolicited
e-mail that contains an attachment or asks them to click a link to a Web page. And while the Web page used in this latest attack was shut down, the hackers behind the scam could post the content in a new location and restart the attack.

(Source: Computerworld/IDG News Service, April 8, 2005)