Home

 Trend Micro Weekly Virus Report
(by TrendLabs Global Antivirus and Research Center)

 
 

Date: Friday September 9, 2005

Issue Preview:

1. Trend Micro Updates - Pattern File & Scan Engine Updates
2. Caged Content – TROJ_CAGER.A (Low Risk)
3. Top 10 Most Prevalent Global Malware
4. Hook, Line, & Sinker: Phishing Attacks Go Professional


1. Trend Micro Updates - Pattern File and Scan Engine Updates

PATTERN FILE: 2.827.00 
SCAN ENGINE: 7.510 


2. Caged Content
- TROJ_CAGER.A (Low Risk)

TROJ_CAGER.A is a memory-resident, non-destructive Trojan that is downloaded from the Internet, dropped by another malware, or manually installed by a user. It appears that this Trojan aims to disrupt browsing activities related to adult or mature materials. It searches the Internet Explorer browser title bar for certain keywords (such as "sex, phallus, or teen.") and when it successfully finds one of these keywords, it will minimize the current Web page and display a message box written partly in Arabic and the rest in English. If the window is left open it continues to display messages in Arabic. Eventually, it displays another message but with the mouse pointer "caged" within the message box area, although the keyboard remains functional. If the user clicks any of the buttons in the displayed messages, they are logged off of their computer.

This Trojan is currently spreading in-the-wild, and infecting computers running on Windows 98, ME, NT, 2000, and XP.

If you would like to scan your computer for TROJ_CAGER.A, or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free, online virus scanner at: http://housecall.trendmicro.com/

TROJ_CAGER.A is detected and cleaned by Trend Micro pattern file #2.822.06 and above.


3. Top 10 Most Prevalent Global Malware
(from September 2 to September 8, 2005)

1. JAVA_BYTEVER.A
2. ADW_BADBITOR.A
3. HTML_NETSKY.P
4. SPYW_GATOR
5. SPYW_DASHBAR.300
6. WORM_NETSKY.P
7. JS_DLOADER.I
8. TSPY_SMALL.SN
9. TROJ_DYFUCA.I
10. TROJ_ROOTKIT.N

4. Hook, Line, & Sinker: Phishing Attacks Go Professional

Phishing is slowly becoming a household term, with a new scam arriving in users’ inboxes as frequently as once per week. Hurrican Katrina has also presented new opportunities for scammers to exploit many peoples' generosity in the plight that has followed. But what makes phishing different from viruses and other threats - and why has it become so popular? Most importantly, what can you do to protect yourself against it?

For questions, comments, and suggestions about the Weekly Virus Report please contact the Newsletters Editor at newsletters@trendmicro.com.
 


 

This message was sent by Trend Micro's Newsletters Editor using Responsys Interact (TM).
Click here to unsubscribe from Trend Micro's Newsletters Editor.
Click here to update your subscription preferences, or to change your email address.
Click here to view our permission marketing policy. Copyright 1989-2004 Trend Micro, Inc. All rights reserved

Trend Micro, Inc., 10101 N. De Anza Blvd., Suite 200, Cupertino, CA 95014