Berlusconi "murder" spam hides trojan

Security experts have warned of a new Trojan being spammed out disguised as a bogus BBC News report claiming that former Italian prime minister Silvio Berlusconi has been killed by terrorist.

Dloadr-ALM arrives attached to an email purporting to come from bbc.italy2006@bbc.com.

The email, which claims that Berlusconi has been killed by an Israeli soldier, can have a variety of subject lines including 'Berlusconi la morte', 'Berlusconi di terrorismo', 'Berlusconi Tragedia', and 'Berlusconi di omicidio'.

The attached files are called necfotos.zip, which contains an image of Berlusconi (silvio01.gif), and a malicious PIF file (silvio02.pif).
"The news report is of course false. Signor Berlusconi is very much alive, and launching the file will not show you a picture of the former Italian PM, but instead execute malicious code on your Windows PC," said Graham Cluley, senior technology consultant at Sophos.

» VNUNet.com - Robert Jaques - 18-08-2006