Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Please click for more information, or scroll down to pass the ad, or Close Ad.
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Build Apps 5x Faster
For Half the Cost
Enterprise Cloud Computing

On Force.com
Hardware
Fiercely productive scanners
Average Rating:
Rate this article:  
Security Alert: Beware of Tiffany Trojan on the Attack
Security Alert: Beware of Tiffany Trojan on the Attack

By Jennifer LeClaire
May 22, 2013 12:24PM

    Bookmark and Share
"Don't open that attachment!" warns Sophos security analyst Graham Cluley. If you get an email appearing to be from world-famous jeweler Tiffany's, saying something like, "Kindly open to see export License and payment invoice attached," it likely contains a malicious Trojan horse, designed to infect and compromise your computer.
 



Malware writers are using a luxury name to hack into your computer. Security watchdog Sophos is reporting that e-mails coming from a Tiffany.com address and carrying the attachment copy.zip are looking to install a malicious Trojan horse on your PC.

"This may be a deliberate ploy on the part of the criminals behind the attack to tempt more people into opening the attachment," Graham Cluley, senior security analyst at Sophos, wrote in a blog post. "Of course, it's child's play to forge e-mail header information, and there is no suggestion that the messages were really sent by Tiffany's," the high-end jeweler known for its little blue gift boxes tied smartly with white ribbon.

"If anything," Cluley said, the folks at Tiffany's "are also victims of this campaign."

Check Your Zipper

We asked Richard Westmoreland, a security analyst at security-as-a-service provider SilverSky, to chime in on the latest Trojan to make headlines. He explained that most successful e-mail Trojans now hide their malicious payload within zip files and depend on social engineering to get the end user to execute it.

"Companies can't block zip file attachments because it would impact legitimate business, however, e-mail filtering with virus scanning should still be able to inspect the contents of unencrypted zip files," Westmoreland said.

"It is important to scan for viruses both at the e-mail gateway and on the users' workstations, but equally important to remind employees not to open files they were not already expecting. In situations where antivirus does not yet have signatures for the payload and an employee still mistakenly opens the file, the workstation will likely start exhibiting suspicious behavior and the compromise could be detected by a SOC that is monitoring that network."

Copy Cat Social Engineers

Westmoreland's colleague Evan Keiser, also a security analyst with SilverSky, told us the Tiffany & Co. Trojan is just another copy of Bredolab (recognized by Sophos security scans as Mal/BredoZp-B). It leverages a foothold the bad guys have within Tiffany's mail server for a decent infection campaign.

"I believe it was pretty smart to utilize Tiffany's, as most people actually waiting on jewelry from them probably have some seriously high-limit credit cards," he said. "Tiffany's mail server was used to send out spam with Bredolab attached."

We also caught up with Grace Zeng, a research analyst at SilverSky, to get her take on the new Trojan. She told us this is not a new trick. Security experts have already seen a large number of fake invoice or delivery notice e-mails from UPS, FedEx and Amazon that contain malware or lead to exploit kits. In her opinion, this Tiffany email is not disguised well. "Who would expect an export license from Tiffany & Company," she asked, "when an order invoice would be more enticing?" (continued...)

1  |  2  |  Next Page >

 

Tell Us What You Think
Comment:

Name:

skunk:

Posted: 2013-07-05 @ 8:07pm PT
thanks got one of these emails today



APC has an established a reputation for solid products that virtually pay for themselves upon installation. Who has time to spend worrying about system downtime? APC makes it easy for you to focus on business growth instead of business downtime with reliable data center systems and IT solutions. Learn more here.


 Hardware
1.   Online Access for the Deaf and Blind
2.   Vaio Fit Battery Danger Forces Recall
3.   Drop in Global PC Shipments Slows
4.   Fast Seagate 6 TB Drive for Data Center
5.   Broadcom Upgrades Its SDN Hardware


advertisement
Online Access for the Deaf and Blind
Pilot program provides technology tools.
Average Rating:
Fast Seagate 6 TB Drive for Data Center
Can use 12 Gb/s SAS interface.
Average Rating:
Sony Digital Paper Cuts Paper Waste
High price justifiable for business.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Google's Street View Software Unravels CAPTCHAs
The latest software Google uses for its Street View cars to read street numbers in images for Google Maps works so well that it also solves CAPTCHAs, those puzzles designed to defeat bots.
 
Canadian Teen Arrested for Heartbleed Hack
One week after the OpenSSL Heartbleed vulnerability was unveiled, Canadian authorities have made the first arrest -- a London, Ontario teenager -- connected to exploiting the security hole.
 
IBM Offers Security, Disaster Recovery as SoftLayer Service
New disaster recovery and security services for SoftLayer clients are being added by IBM. Big Blue said the new capabilities will speed cloud adoption by alleviating concern over business continuity.
 

Enterprise Hardware Spotlight
Vaio Fit 11A Battery Danger Forces Recall by Sony
Using a Sony Vaio Fit 11A laptop? It's time to send it back to Sony. In fact, Sony is encouraging people to stop using the laptop after several reports of its Panasonic battery overheating.
 
Continued Drop in Global PC Shipments Slows
Worldwide shipments of PCs fell during the first three months of the year, but the global slump in PC demand may be easing, with a considerable slowdown from last year's drops.
 
Google Glass Finds a Home in Medical Education, Practice
Google Glass may find its first markets in verticals in which hands-free access to data is a boon. Medicine is among the most prominent of those, as seen in a number of Glass experiments under way.
 

Mobile Technology Spotlight
Google Releases Chrome Remote Desktop App for Android
You're out on a sales call, and use your Android mobile device to grab a file you have back at the office on your desktop. That's a bit easier now with Google's Chrome Remote Desktop app for Android.
 
Amazon 3D Smartphone Pics Leaked
E-commerce giant Amazon is reportedly set to launch a smartphone after years of development. Photos of the phone, which may feature a unique 3D interface, were leaked by tech pub BGR.
 
Zebra Tech Buys Motorola Enterprise for $3.45B
Weeks after Lenovo bought Motorola Mobility’s assets from Google for $2.91 billion, Zebra Technologies is throwing down $3.45 billion for Motorola’s Enterprise business in an all-cash deal.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | Small Business | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.