Nuwar on Blogspot

Since Yesterday evening, the gang behind Nuwar (also called the Storm Worm), have registered a number of blogspot accounts to spread their malware. The malicious pages look like the following screen shot.

Clicking on the image will redirect the browser to an executable called love.exe while clicking on the link in the text below the image will download a file named withlove.exe. Both executables are variants of Nuwar. Our antivirus detects both files through our Web access protection module.

Pierre-Marc Bureau

Researcher

Author Pierre-Marc Bureau, ESET

  • Johnson

    Hi Pierre-Marc Bureau,
    I sent other new variants of Nuwar to samples@eset.sk some days ago,but now eav still can’t detect them.

Follow Us

Automatically receive new posts via email:

Delivered by FeedBurner

4 articles related to:
Hot Topic
08 Apr 2008
ESET Virus Radar

Archives

Select month
Copyright © 2014 ESET, All Rights Reserved.