[Dshield] New paypal trojan

Rick Klinge rick at jaray.net
Fri Apr 30 21:13:57 GMT 2004

> I'm sure that viruses/trojans have been doing things like this for a 
> while, but this was the first time I had seen anything like this.
> http://www.sophos.com/virusinfo/analyses/trojwebdlna.html
> It edits the hosts file to add an entry for www.paypal.com 
> and then adds a 
> new trusted root certificate for the fake paypal.com site.
>          ---Tim Rushing 

Change the host file to read only...


Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.

More information about the list mailing list