NEWS FROM THE LAB - Saturday, August 18, 2007

Again new Zhelatin tactics Posted by Mikko @ 15:39 GMT

Last Wednesday we blogged about the changing tactics being used by the Zhelatin/Storm Worm gang and their "eCard for you" – themed malware spam.

The tactics are changing again. The malicious websites haven't changed; they still spread malicious msdataaccess.exe files.

However, the e-mails no longer talk about ecards. Instead, they look like these two:



Thanks to Adam from Sunbelt for spotting the later one.