{"id":469,"date":"2007-03-16T08:39:26","date_gmt":"2007-03-16T08:39:26","guid":{"rendered":"https:\/\/www.darknet.org.uk\/2007\/03\/msn-password-stealing-trojan-becomes-public\/"},"modified":"2010-06-18T09:23:23","modified_gmt":"2010-06-18T08:23:23","slug":"msn-password-stealing-trojan-becomes-public","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2007\/03\/msn-password-stealing-trojan-becomes-public\/","title":{"rendered":"MSN Password Stealing Trojan Becomes Public"},"content":{"rendered":"

<\/p>\n

Ah another trojan, this time targeting MSN Live logins for. The trojan has been made public by some kind citizen calling himself “Our Godfather” on the BitTorrent network.<\/p>\n

The sad thing is…I guess it works and hundreds of people will have installed it.<\/p>\n

Malware designed to steal users’ Windows Live Messenger password has been released onto the net. The password stealer was released for download via BitTorrent earlier this week by a hacker using the handle “Our Godfather”.<\/p>\n

The malware comes in the form of an IMB download confirmed by anti-virus firm Sophos as containing a password-stealing Trojan horse. Victims would need to be tricked into downloading and executing the malware, which might be renamed in a bid to disguise its identity, in order for the exploit to work.<\/p><\/blockquote>\n

It works a bit like the common phishing schemes, but it uses actual software to emulate the MSN Messenger login screen rather than a web-page.<\/p>\n

“It displays a fake Windows Live Messenger Login Screen and prompts for login details. Username and password are captured and stored in C:\\pas.txt,” explained Sophos senior technology consultant Graham Cluley.<\/p>\n

Sophos has named the malware as MSNfake-M<\/a> and added protection against the code to its security software packages. Other anti-virus firms can be expected to follow suit.<\/p><\/blockquote>\n

Another reason to use Sophos I guess, they are always ahead of the curve on this stuff.<\/p>\n

<\/p>\n

Source: The Register<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Ah another trojan, this time targeting MSN Live logins for. The trojan has been made public by some kind citizen calling himself “Our Godfather” on the BitTorrent network. The sad thing is…I guess it works and hundreds of people will have installed it. Malware designed to steal users’ Windows Live Messenger password has been released […]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[7,4],"tags":[1743,1054,142,458,510,8857],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/469"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=469"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/469\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=469"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=469"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=469"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}