Fake MP3 Trojan Detected On 27% Of PCs

MrBrian · May 7, 2008

Since Friday, more than half a million Trojan horse programs disguised as media files have been detected on consumer PCs, according to McAfee Avert Labs.

"This is one of the most prevalent pieces of malware in the last three years," said Craig Schmugar, a McAfee Avert Labs researcher, in an e-mailed statement. "We have never before had a threat this significant that arrives as a media file."
Click to expand...

Full story

MrBrian · May 7, 2008

While potentially millions of users' machines worldwide contain the corrupted files, only a fraction of those individuals have actually installed the trojan by agreeing to download the fake media player, Schmugar said.

The attack could have been more destructive had the trojan forced its victims' machines to become part of a bot or sought identity theft through tactics such as password stealing, he added.
Click to expand...

Full story

harrywaldron · May 8, 2008

Hi - More links are noted below:

http://msmvps.com/emoticons/emotion-29.gif While this is more applicable to home users, I haven't seen a threat rated as MEDIUM for a while. This one is apparently circulating extensively. It appears to affect folks participating on P2P networks, which are always dangers with respect to malware and copyright concerns.

All users need avoid the site: fastmp3player (dot ) com

Avert Medium Threat Advisory -- Fake MP3 malware P2P attacks
http://www.avertlabs.com/research/blog/index.php/2008/05/06/fake-mp3s-running-rampant/
http://www.avertlabs.com/research/blog/index.php/2008/05/07/yet-even-more-fake-media-files/
http://blastmagazine.com/2008/05/mcafee-identifies-downloader-uah-first-medium-risk-malware-in-three-years/
http://vil.nai.com/vil/content/v_144503.htm

QUOTE: Detection of a trojan named Downloader-UA.h was added to the McAfee DAT files several days ago. Since that time more than 360,000 McAfee VirusScan Online users have reported detections, a whopping 32% of those reporting in the past 24 hours alone. Now Downloader-UA.h is not your everyday trojan, this detection covers fake music and video files associated with *** MALIOUS URL REMOVED ***

When a user attempts to load one of these MP3 and MPG files, they don’t get the music/video they were hoping for; instead they’re directed to download a file named PLAY_MP3.exe. In fact, the MP3/MPG file they downloaded was completely fake, playing no media clip what so ever.

Log in or Sign up

Fake MP3 Trojan Detected On 27% Of PCs

MrBrian Registered Member

MrBrian Registered Member

harrywaldron Registered Member

Log in or Sign up

Fake MP3 Trojan Detected On 27% Of PCs

MrBrian Registered Member

MrBrian Registered Member

harrywaldron Registered Member

Useful Searches