[AusNOG] Trojan email run and AusCERT Week in Review - Week Ending16/02/2007

[Tom.Minchin at csiro.au]

We're getting a bunch of new variants on this theme:

67 Occurrences of subject:  A miracle' as top paraglider survives storm
lift freeze in northern New South Wales. (0 blocked) From 41 IP
addresses
65 Occurrences of subject:  Reef threat worsens Run-off from land may be
a greater threat to the Great Barrier Reef than first thought. (all
blocked) From 40 IP addresses
77 Occurrences of subject:  John Howard sectet affair: low morale? (all
blocked) From 44 IP addresses
61 Occurrences of subject:  LONDON: World champions Australia will slip
from the top of the International Cricket Council (ICC) one-day rankings
for the first time if they lose their current series in New Zealand.
Aussie stocks are groing again and this trend seems to Road death toll
rises: horrible news (all blocked) From 30 IP addresses

-----Original Message-----
From: ausnog-bounces at ausnog.net [mailto:ausnog-bounces at ausnog.net] On
Behalf Of Matthew McGlashan
Sent: Monday, 19 February 2007 5:32 PM
To: ausnog at ausnog.net
Subject: [AusNOG] Trojan email run and AusCERT Week in Review - Week
Ending16/02/2007 

Greetings AusNOG,

Week in review report for last week.

In other news we have just released an alert on a(nother) trojan spam
run
at:

  AL-2007.0026 -- [Win] -- "Prime Minister heart attack" trojan 
  http://www.auscert.org.au/7314

Basically there being emails currently in circulation with a variety of
subject lines, including:

          "Current Australia's Prime Minister survived a hear attack"
          "The life of the Prime Minister is in grave danger"
          "Prime Minister survived a heard attack"

        with a link to malicious websites, including:

          h**p://www,austr-news,com/
          h**p://www,theaunews,com/
          h**p://www,theau-news,org/

Anyone seeing a lot of this?

Thanks,

-- Matthew McGlashan --
Coordination Centre Team Leader             | Hotline: +61 7 3365 4417
Australian Computer Emergency Response Team | Direct:  +61 7 3365 7924
(AusCERT)                                   | Fax:     +61 7 3365 7031
The University of Queensland                | WWW:
www.auscert.org.au
Qld 4072 Australia                          | Email:
auscert at auscert.org.au