Click here to become infected (Part 2)
Double whammy spammy
New spam emails can turn vulnerable PCs into spam-spreading 'zombies'.
Messagelabs, which issued a similar warning about the problem more than a week ago, said today that it is still analysing the .EXE file, which is hosted on a suspicious website, but says users should know that the spammers behind the scam could change to a new site at any time by uploading a new Trojan. The site initially implicated in the spam was www. xcelent.biz (space inserted intentionally), which is no longer available.
"Users should already know that it is never a good idea to press the 'click here to remove' link on spam emails as it confirms to spammers that the email address is real," said Alex Shipp, MessageLabs' senior anti-virus technologist.
"This latest spam attack, however, presents a double whammy: it not only opens up the floodgates to endless amounts of spam as the address is sold to other spammers, but it allows a compromised machine to be used to host their next spam run, while spammers are busy in the background stealing confidential data."
Indeed, the firm warns that users on infected PCs could have their passwords or other confidential information stolen.