Original URL: http://www.channelregister.co.uk/2006/10/03/flight_disaster_phishing_scam/
Flight disaster phishing scam lands in Brazil
Conmen latch onto tragedy, again
Posted in Software & Security, 3rd October 2006 14:38 GMT
Free whitepaper – Managing desktop software for fun and profit
Pond-dwelling scammers are seeking to exploit interest in last weekend's Brazilian airline disaster (http://www.cnn.com/2006/WORLD/americas/10/02/brazil.crash/) to tempt potential victims onto a site hosting a Trojan downloader.
The malware attempts to install a banking keylogger onto the PCs of potential marks. The attack, written in Portuguese, targets online banking customers in Brazil, a major centre of phishing attacks.
Scam emails contain subject lines such as "fw: as fotos do acidente do boeing da Gol!", as illustrated in an advisory (http://www.websensesecuritylabs.com/alerts/alert.php?AlertID=646) by web security firm Websense.
The ruse attempts to exploit prurient interest in a disaster that killed all 155 people on-board a Boeing 737 jet that crashed into a remote stretch of Brazilian jungle.
Similar - though arguably less sophisticated attacks - followed last year's London bombing attacks, hurricane Katrina, and the Asian tsunami of 2004. No human disaster these days is complete without a topical piece of malware. The language of these malware-promoting scam emails is no longer restricted to English, as the Brazilian Gol Airlines scam shows. ®