Trojan Hides In Microsoft SQL Database

Researchers have discovered a Trojan horse that is not downloaded from a URL, but through a Microsoft SQL database. That leaves Intel Security know. The infection begins with an infected e-mail attachment that contains a downloader. Once the attachment is opened will download the final malware.

Normally this is done via a URL, but does in the case of the now discovered downloader that connects to a Microsoft SQL database. That makes it difficult for administrators to find out where the malware comes from. To download the Trojan horse downloader makes the connection to the database, check the correct table and downloads the malware via the response from the database.

VB.Net code showing the SQL query to download the payload.

In this case, it is a banking Trojan that steals money from Brazilian bank accounts. The malware can also steal login details for Facebook, email services and other websites where a password field is used. The Trojan also disables the G-Buster plug-in from. This plug-in should properly protect users during online banking. Furthermore, the malware screenshots of the online banking session. All information stealing malware is then stored in the Microsoft SQL database.

Australia Warns Of CVs Ransomware

The Australian government has warned companies to resumes that are currently scattered through e-mail and try to infect computers with ransomware. The e-mail suggests someone and says that he has attached his job. It is a zip file that contains a JavaScript file again. Once this .js file is opened, the computer becomes CryptoWall-ransomware infected.

It is the same attack in the April 21 news came. The Stay Smart Online campaign by the Australian government suggests that the attack focuses on Australian companies and a new campaign is active since last week. CryptoWall encrypts files on the computer and then asks for a ransom here. The Australian government warns that many victims recover their files if they pay the ransom, but there is no guarantee, since users have to deal with criminals. "Prevention is therefore the best medicine for ransomware and other malware attacks," the campaign.

FBI Warns Of Web Cams After Earthquake Nepal

The FBI has warned Internet scams who abuse people who want to donate money after the earthquake in Nepal or trying to spread malware. The death toll from the earthquake has now passed the 4,300 and the population is in need of all kinds of aid.

"After a natural disaster like a lot of people contribute to utilities and organizations. The FBI is warning the public to watch out for before it is donated," said the intelligence. This involves donation requests coming in via e-mail or websites that ask for. In the past it has often happened that after a natural disaster is fraudulent Web sites or e-mails appear that ask for donations, but the money does not allow to enter the victims of such disasters.

The FBI advises people choosing not to respond to unsolicited e-mails, including clicking on links or open attachments because they may contain malware. People are warned also for individuals occurring on social media sites or via e-mail as victims or officials and ask for a donation. Furthermore, the legitimacy of non-profit organizations should be checked on the Internet. According to the FBI, most legitimate charities websites ending in .com or .org.