Trojan demands money for internet access

December 1, 2009 – 8:32 AM

There’s nothing new about Windows trojans resorting to a little blackmail, but Computer Associates has now observed a new twist; a trojan which blocks internet access until the user enters an activation code. This is activation code is obtained by sending an SMS containing a particular number to an expensive premium rate phone number – CA does not mention the sum involved.

The malware, dubbed ‘Win32/RansomSMS.AH’, infects computers by claiming to be the “uFast Download Manager” tool which, when run, accuses users (in Russian) of having breached their licence conditions. CA has kindly provided a free tool (via zip direct download) to enable users to generate the required code for themselves.


You must be logged in to post a comment.