McAfee > Theat Center > Virus Detail Page

Overview

Characteristics

Warning,

Its not exactly a virus, but a dirty trick that will harm specially the "Newbies" and those who access the Internet via dialup connection. The program will force you to reveal your username and password to the dark side of the Internet. That's the new SPARTAN HORSE, which has been written in pure HTML language, that will pretend that your connection has been broken and will ask you for your identification to connect again.

The way it works is quite simple: in a certain moment, you'll be notified by your computer that your connection has been lost. At this moment, a FAKE window will appear to restore the connection, where you may enter your username, password and telephone number for the connection.

Unprofessional users may trust on that and input their information, in order to restore the connection.

When the user click "Ok", the login data will be transferred through the Internet to some hidden area somewhere in the world. By clicking in "Ok" the data will be immediately transferred to the hacker.

This program does not use an executable code (exe), and does not spread itself. It may be acquired by visiting a Home Page which should have been previously prepared by the hacker to host the trap.

Users may check if the connection has been really lost by checking out the modem status. Besides, the fake connection window is not identical to the Windows standard, because this script is a JavaScript program. It's not difficult to figure out that it's a fake screen, because it's much slower than the original screen, and all the fields are blanks instead of containing the last user login information. The title bar always show "Internet Explorer", even if you're using Netscape.

If this warning message was lately arrived for you, and you think that you may be trapped by the Spartan Horse, please change your Internet password immediately, before the hacker begin using your account.

Using your account the hacker will be able to hack on your behalf AND to read your e-mail."

Symptoms

Method of Infection

Removal

Ignore or delete this email and do not forward it to others.

Variants

Variants

N/A

All Information

Overview -

Characteristics

Characteristics -

Warning,

Its not exactly a virus, but a dirty trick that will harm specially the "Newbies" and those who access the Internet via dialup connection. The program will force you to reveal your username and password to the dark side of the Internet. That's the new SPARTAN HORSE, which has been written in pure HTML language, that will pretend that your connection has been broken and will ask you for your identification to connect again.

The way it works is quite simple: in a certain moment, you'll be notified by your computer that your connection has been lost. At this moment, a FAKE window will appear to restore the connection, where you may enter your username, password and telephone number for the connection.

Unprofessional users may trust on that and input their information, in order to restore the connection.

When the user click "Ok", the login data will be transferred through the Internet to some hidden area somewhere in the world. By clicking in "Ok" the data will be immediately transferred to the hacker.

This program does not use an executable code (exe), and does not spread itself. It may be acquired by visiting a Home Page which should have been previously prepared by the hacker to host the trap.

Users may check if the connection has been really lost by checking out the modem status. Besides, the fake connection window is not identical to the Windows standard, because this script is a JavaScript program. It's not difficult to figure out that it's a fake screen, because it's much slower than the original screen, and all the fields are blanks instead of containing the last user login information. The title bar always show "Internet Explorer", even if you're using Netscape.

If this warning message was lately arrived for you, and you think that you may be trapped by the Spartan Horse, please change your Internet password immediately, before the hacker begin using your account.

Using your account the hacker will be able to hack on your behalf AND to read your e-mail."

Symptoms

Symptoms -

Method of Infection

Method of Infection -

Removal -

Removal -

Ignore or delete this email and do not forward it to others.

Variants

Variants -

N/A