[Dshield] New paypal trojan

Rick Klinge rick at jaray.net
Fri Apr 30 21:13:57 GMT 2004


> I'm sure that viruses/trojans have been doing things like this for a 
> while, but this was the first time I had seen anything like this.
> 
> http://www.sophos.com/virusinfo/analyses/trojwebdlna.html
> 
> It edits the hosts file to add an entry for www.paypal.com 
> and then adds a 
> new trusted root certificate for the fake paypal.com site.
> 
>          ---Tim Rushing 

Change the host file to read only...

~Rick

___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.




More information about the list mailing list