Commtouch, an Israeli security firm that specializes in protecting e-mail integrity, says that it has detected a new malware outbreak that is spread through e-mails claiming to be from private investigators. According to Commtouch, the e-mails tell recipients that a private investigator has been recording the recipients' phone calls and that an audio file of one of the calls is attached to the message. When unwitting recipients download the "call" to their hard drives, their computers become infected with malware.
"Preying on people's guilty conscience with a virus is an ingenious trick of social engineering," says Rebecca Steinberg Herson, Commtouch's vice president of marketing. "The e-mail messages are written generically enough to fit almost every possible transgression one might wish to hide, ensuring people will open the attachments."
Some common subject headings for the malware e-mails include "I'm monitoring you," "You're being watched" and "The tape of your conversation." Commtouch says that the malware is sent in the form of a password-protected, compressed file that appears to be an MP3 sound file.
While Herson says she doesn't know the particular nature of the malware, she suspects that it isn't meant to overtly damage most computers but rather to get information from them or turn them into zombie machines.
"Nobody's bothering to create malware to wreak havoc with the machines anymore," she says. "Instead, they're creating malware that is stealthy and can steal information like passwords through mining information on hard drives."
Herson also notes that the private detective malware e-mails employ tactics similar to what the early Storm worm malware e-mails used. Those particular e-mails purported to be news alerts that lured recipients into inadvertently downloading malware by enticing them with sensationalistic headlines such as "Chinese missile shoots down USA satellite" and "230 dead as storm batters Europe."