August 2007
Trojan Now Uses Hotmail, Gmail as Spam Hosts
BUCHAREST, Romania √ August 7, 2007 √ Following a joint effort by BitDefender and Yahoo security teams, the efforts of the criminals behind Trojan.Spammer.HotLan to generate and use Yahoo accounts to send spam seems to have been stymied.
However, the malware authors have switched to generating Hotmail and Gmail accounts to send their spam, apparently having found a way of bypassing the captcha systems of the two webmail providers.
The captchas are supposed to ensure that it's humans, not computers trying to create the account, in an effort to stem exactly this kind of service abuse.
Every active copy of the HotLan trojan tries to create an account, sending off the captcha image in an encrypted form to a spammer-controlled website, wherefrom a solution is sent back to it and entered in the appropriate field. Then, the trojan pulls encrypted spam e-mails from another website, decrypts them and sends them to (presumably valid) addresses taken from yet another website.
"There were 514 thousand Hotmail accounts created as of Friday, as well as about 49 thousand at Google" commented head of BitDefender Antivirus Lab Viorel Canja. "However, it is worth noting that while most of the Hotmail accounts are operational, Gmail accounts get blocked pretty fast, usually about a couple of days after being created."
BitDefender was the first security company to detect the trojan and add a generic signature, which has been successful in identifying all the versions of the trojan created so far. BitDefender analysts determined that the trojan is not widespread, which might indicate a desire to "keep a low profile" on the part of its creators.
BitDefender has offered support to the affected parties.
About Bitdefender®
Bitdefender is the creator of one of the world's fastest and most effective lines of internationally certified internet security software.Since 2001, the company has been an industry pioneer, introducing and developing award-winning protection. Today, Bitdefender technology secures the digital experience of around 400 million home and corporate users across the globe.
Recently, the company has won a range of key independent recommendations in the US, UK and across Europe, including ConsumerSearch, Which?, Stiftung Warentest and Taenk. Bitdefender antivirus technology has also finished top in leading industry tests from both AV Test and AV-Comparatives. More information about Bitdefender's antivirus products is available from the company's security solutions press room. Additionally, Bitdefender publishes Malware City providing the latest updates on security threats and helping users stay informed in the everyday battle against malware.