NISCC Briefing 08/2005 Issued 16 June 2005 Targeted Trojan Email …

Short Description
Trojans are delivered either in email attachments or through. links to a website. … When opened, the file installs a trojan onto the user’s machine. …

Website: www.cpni.gov.uk | Filesize: 73kb

Content
National Infrastructure Tel: 0870 487 0748
Security Co-ordination Centre Fax: 0870 487 0749
PO Box 832 Email: enquiries@niscc.gov.uk
London, SW1P 1BG Web: www.niscc.gov.uk
NISCC Briefing 08/2005
Issued 16 June 2005
Targeted Trojan Email Attacks
Reference to any specific commercial product, process, or service by trade
name, trademark manufacturer, or otherwise, does not constitute or imply
its endorsement, recommendation, or favouring by NISCC. The views and
opinions of authors expressed within this notice shall not be used for
advertising or product endorsement purposes.
NISCC shall accept no responsibility for any errors or omissions contained
within this briefing notice. In particular, they shall not be liable for any loss
or damage whatsoever, arising from or in connection with the usage of
information contained within this notice.2
Key Points
?A series of trojanised email attacks are targeting UK
Government and companies.
?The attackers’ aim appears to be covert gathering and
transmitting of commercially or economically valuable
information.
?Trojans are delivered either in email attachments or through
links to a website.
?The emails employ social engineering, including use of a
spoofed sender address and information relevant to the
recipient’s job or interests to entice them into opening the
documents.
?Once installed on a user machine, trojans may be used to
obtain passwords, scan networks, exfiltrate information and
launch further attacks.
?Anti-virus software and firewalls do not give complete
protection. Trojans can communicate with the attackers
using common ports (e.g HTTP, DNS, SSL) and can be
modified to avoid anti-virus detection.
?This document provides detection and protective advice.
There is no complete mitigation for computers connected to
the Internet….