It has only been a day since the last strategy shift from the Nuwar gang and they have already gone away from the love letter theme. By monitoring computers infected with Nuwar, we can keep track of their social engineering schemes. They are now using a common theme used by the Zlob threat for a
Since Yesterday evening, the gang behind Nuwar (also called the Storm Worm), have registered a number of blogspot accounts to spread their malware. The malicious pages look like the following screen shot. Clicking on the image will redirect the browser to an executable called love.exe while clicking on the link in the text below the
The gang behind Storm missed Easter but they were not going to miss two opportunities in a row! We are witnessing a new Storm campaign around the theme of April Fool’s day. Electronic mails are being sent with titles like "Happy April Fool’s Day.".The body of the message contains a small sentence and a link.