Rumors about the Internet as we know it dying by 2012 have been circulating for some time now, so it’s not really that surprising when the TrendLabs Content Security team was alerted that a Trojan is taking advantage of this conspiracy theory in order to trick users into running it.
Then again, spammed email with sensational headlines do make even the most cautious computer users take a peek (the latest NUWAR/Storm run being a prime example). What more when the said headlines tell them that the Internet, which has been practically their extra limbs since the last century, will suddenly be up for…TV-like subscriptions?
The malware involved in this spam run is detected by Trend Micro as TROJ_PIDIEF.JT, a Trojan that arrives as a PDF file named DOC.PDF. This file promises more information regarding the alleged Internet death, and based on the email subjects and details it arrives with (see sample messages below), it’s not easy NOT to double-click on it:
PIDIEF Trojans are known malware droppers or downloaders, so once users click on the attached PDF file — and whether or not they believe the theory — another malware is already up and running on their systems and doing malicious routines. The death of the Internet is going to be the least of their problems after that…
Trend Micro already blocks this spam with its Smart Protection Network. Other users, as always, are advised to keep their systems and applications up to date with the latest security patches and to be wary when opening suspicious email, no matter how interesting they appear to be.