January 10th, 2008

Storm worm goes phishing

Posted by Larry Dignan @ 7:46 am

Categories: Botnets, Exploit code, Hackers, Spam and Phishing, Viruses and Worms, Vulnerability research

Tags: Worm, F-Secure Corp., Storm Worm, Phishing, Cyberthreats, Spam, Viruses And Worms, Security, Spam And Phishing, Larry Dignan

The dreaded Storm worm is now being used for phishing scams, according to security researchers.

F-Secure outlined a phishing scam involving the Storm worm (all resources) on i-halifax.com and noted that the site’s IP address changed every second or so–it was hosted within a botnet.

Pretty crafty eh?

F-Secure says on its blog that:

“Somebody is now using machines infected with and controlled by Storm to run phishing scams. We haven’t seen this before. But we’ve been expecting something along these lines.”

Also see Trend Micro’s take and Techmeme for more coverage.