Trojan Moves to Use Hotmail and Gmail as Spam Hosts.

Over Half a Million Spam Accounts Detected So Far

BUCHAREST, Romania -- BitDefender[R], a global provider of award-winning antivirus software and data security solutions, today announced that a joint effort between the BitDefender and Yahoo security teams appears to have stymied the criminals behind Trojan.Spammer.HotLan to generate and use Yahoo accounts to send spam.

However, the malware authors have switched to generating Hotmail and Gmail accounts to send their spam, apparently having found a way of bypassing the captcha systems of the two webmail providers.

The captchas are supposed to ensure that it is humans, not computers trying to create the account, in an effort to stem exactly this kind of service abuse.

Every active copy of the HotLan trojan tries to create an account, sending off the captcha image in an encrypted form to a spammer-controlled website, wherefrom a solution is sent back to it and entered in the appropriate field. Then, the trojan pulls encrypted spam e-mails from another website, decrypts them and sends them to (presumably valid) addresses taken from yet another website.

"There were 514 thousand Hotmail accounts created as of Friday, as well as about 49 thousand at Google," commented Viorel Canja, head of BitDefender Antivirus Lab. "However, it is worth noting that while most of the Hotmail accounts are operational, Gmail accounts get blocked pretty fast, usually about a couple of days after being created."

BitDefender was the first security company to detect the trojan and add a generic signature, which has been successful in identifying all the versions of the trojan created so far. BitDefender analysts determined that the trojan is not widespread, which might indicate a desire to keep a low profile on the part of its creators.

BitDefender has offered support to the affected parties.

About BitDefender[R]

BitDefender is a leading global provider of security solutions that satisfy the protection requirements of today's computing environment. The company offers one of the industry's fastest and most effective lines of security software, setting new standards for threat prevention, timely detection and mitigation. BitDefender delivers products and services to over 41 million home and corporate users in more than 180 countries. BitDefender has offices in the United States, the United Kingdom, Germany, Spain and Romania. Further information about BitDefender can be obtained by visiting: http://www.bitdefender.com.