Yet Another Storm Variant - Amero Replacing the Dollar
July 23th, 2008
We have seen evidence of yet another storm variant on the attack. This one announcing that the Amero will be replacing the dollar.
The victim may see an email with a subject something like: The AMERO currency replacing the Dollar
With the following text:
The Dollar disappeared http://ip_address_here
When the user goes to this URL they are displayed a web page that states:
The U.S. Government began to realize the plan to replace the Dollar with the “Amero”, the new currency of the North American Currency Union. Canada, the United States of America and Mexico have resolved to unit in order to resist the Worldwide Financial Crysis. You can become acquainted with the plan of the implementation of Amero, just click on the icon under this text.
The icon then loads the amero.exe executable which carries the malware payload.
We have seen the first signs of this on July 21 and the activity with this is continuing still.
Secure Web AntiMalware users are protected from this latest attack.
Back to McAfee Research Blog overview
