Angelina Jolie
Angelina Jolie is the latest lure in a campaign of malicious spam

Spammers tout 'nude' Angelina Jolie pix

But emails deliver malware

Written by Robert Jaques

Antivirus experts have warned of a new wave of spam messages that use fake events related to Angelina Jolie in order to trick users into downloading and installing malware.

Researchers at Romanian firm BitDefender said that this latest campaign is mostly carried via spam messages based around alleged adult video footage of the movie star.

Advertisement

In order to watch the 'movie', users have to download a file called 'video-nude-anjelina.avi.exe' which is infected with Trojan.Agent.AGGZ.

The spam message comprises an explicit image of Jolie, along with text claiming that the email has been sent as part of the MSN Featured Offers programme.

The message attempts to play a double role by trying to trick the user into thinking that this is a legitimate news message and by preventing spam filters from labelling the entire email as spam.

"The spam wave is part of a larger category of unsolicited messages that rely on social engineering techniques in order to lure unwary users into installing Trojans," said Vlad Valceanu, head of BitDefender anti-spam research.

The spam wave is part of a larger category of unsolicited messages that rely on social engineering

Vlad Valceanu BitDefender

"This type of attack seems to be extremely successful, as the number of messages has quickly escalated over the last couple months.

"In order to achieve their goals, spammers usually rely on international celebrities and their pictures, along with catchy yet fake news leads."

This is not the only incident involving Jolie. The actress recently gave birth to two children, and spammers took advantage of the event in order to infect more computers.

The spam campaign following the event announced that Jolie gave birth to no fewer than five children, and even offered users a link to a website allegedly hosting a small video of the event.

Once on the respective page, users were shown an image masquerading as a Flash video player.

But when the user landed on the compromised webpage, the download started immediately without any user intervention - a procedure also known as drive-by download.

The binary file was infected with Trojan.Downloader.Exchanger.Gen.1, a piece of malware that has been widely used in another spam campaign promoting an alleged antivirus utility called Antivirus XP 2008.

Comments

White papers

Related jobs

More Accounting jobs

Spotlight

Stuart Bridges, Hiscox

Stuart Bridges: FD of Hiscox

Dull is the new black in these straightened times –...

Top 30 Accounting Networks and Associations 2008

The race to become the biggest firm on the planet...

Barack Obama Accountancy Age cover October 2008

Obama: asset or liability?

What an Obama presidency could mean for you

Find your next job

Find your next job
Salary Checker

Job of the week

More finance jobs

Newsletters

Sign up here for the very latest news delivered to your inbox. Choose from the following options:

Your next job

Have your say

Will proposed tax cuts help to stimulate the economy?
Yes
No

Advertisement

Search white papers

Search white papers

Advertisement