Hackers exploit crisis in Myanmar to spread infection

Email links to Dalai Lama’s genuine website, but attachment is malicious. Taking advantage of international concern regarding the daily demonstrations in Myanmar, IT security and control firm Sophos has cautioned computer users to be wary of a malicious email which claims to be a message of support for monks and other protesters in Myanmarfrom the Dalai Lama. In reality, however, it carries a malicious attack designed to infect the recipient’s PC. The email reads as follows: Dear Friends & Colleagues, Please find enclosed a massage from His Holiness the Dalai Lama in supportof the recent pro democracy demonstrations taking place in Burma. This is for your information and can be distributed as you see fit. Best wishes. Tenzin Taklha Joint Secretary Office of His Holiness the Dalai Lama When users open the attached document (filename: hhdl burma_001.doc), it attempts to exploit a Word vulnerability which in turn tries to download a Trojan horse onto the victim’s PC.Sophos proactively detects the malicious document as Exp/1Table-B and the Trojan it tries to download as Agent-CGU. Sophos experts note that to addeven more credibility to the message and to encourage a greater number of victims to open the attachment, a link to official website of the Dalai Lama is included. The email links to the genuine Dalai Lama website in an attempt to look more credible. “The Burmese regime is said to have tried to stop news coming out of the country by shutting down internet cafes andcontrolling computer users’ access to the net. People around the world are hungry to hear about the latest situation in the country and support the pro-democracy movement, and may be tempted to read this so-called letter from the Dalai Lama,” said Graham Cluley, senior technology consultant at Sophos. “Using topical news stories to trick unwary computerusers into opening and downloading malicious code is one of the oldest tricks in the book, but it’s obviously still working or the hackers wouldn’t waste theirtime on it. We should all use our common sense and question the legitimacy of emails sent out of the blue.” Sophos recommends that companies protect themselves with a consolidated solution whichcan control network access and defend against the threats of spam, hackers, spyware and viruses.