Barbara Moratek, Ivete Foundation: SCAM!

General Topics
1
There is a new scam going around where small non-profit organizations are being targeted by a “Barbara Moratek” of the “Ivete Foundation“.

http://sunbeltblog.blogspot.com/2008/01/beware-barbara-moratek-of-ivete.html

Also here:

http://blog.washingtonpost.com/securityfix/2008/01/barbara_moratek_is_not_your_fr.html

Googling the name leads to links to malware: for example, fake YouTube sites on Digg pushing Trojans:

Antivirus Version Last Update Result AhnLab-V3 2008.1.12.10 2008.01.11 - AntiVir 7.6.0.46 2008.01.11 - Authentium 4.93.8 2008.01.12 - Avast 4.7.1098.0 2008.01.11 Win32:Zlob-AHS AVG 7.5.0.516 2008.01.11 Downloader.Zlob.RN BitDefender 7.2 2008.01.12 Trojan.Downloader.Zlob.ABGS CAT-QuickHeal 9.00 2008.01.12 - ClamAV 0.91.2 2008.01.11 Trojan.Dropper-2529 DrWeb 4.44.0.09170 2008.01.11 Trojan.Popuper.origin
2

Frank, is there any possibility of fake files into the official YouTube site?

3

The scam YouTube sites are pretty obvious fake when you look carefully: there’s no suggestion that YouTube is infected.

hxxp://www[dot]yuotuhe[dot]com/

hxxp://www[dot]ynotube[dot]com/

(Do not go to these sites: they’re serving live malware!)

4

Thanks for the info Frank.

Well, I hope Alwil team take a look on it and improve detection (if any is missed).

5

Yup, Thanks for the info Frank