Barely three weeks into the new year, as the storm “Kyrill” ravaged over central Europe, another “storm” brewed. The new storm was a deluge of spam email messages that promised to bring information about Europe’s most severe winter storm since 1999, with subject lines such as “230 dead as storm batters Europe”, among others.
That is how TROJ_SMALL.EDW, arriving as attachment to the said email messages, came to be dubbed the “Storm” malware.
But this Trojan is more than just a malware with a clever social engineering technique. Tagging WORM_NUWAR.CQ along, it created a partnership that staged a complex attack. To read a comprehensive article about the routines and ultimate goals of the TROJ_SMALL.EDW-WORM_NUWAR.CQ tandem, click here: TROJ_SMALL.EDW Storms into Inboxes, Teams Up with NUWAR to Create Unique Network.