New FedEx Delivery trojan confirmed

A new trojan hidden in what looks like a legitimate message from the logistics company FedEx has been detected.

The email informs recipients of a delivery failure and instructs them to download and print out an invoice copy to collect their package. Once opened, the attachment installs a trojan that changes the wallpaper and allows remote hackers to take control of the infected computer.

Infected computers could then directed to send spam, host spyware and install key loggers to discretely steal personal and confidential information.

IronPort’s Virus Outbreak Filters (VOF) identified and provided protection against the threat 40 hours before other major anti-virus vendors. The company was acquired by Cisco last year in an $830 million agreement that saw it tap into the antipam and messaging compliance market.

While detection of the trojan has been confirmed in the United States and Europe, the threat has not yet reached the Middle East. Still, web users in the region are advised to be wary of accessing attachments and take precautions by updating security software. According to IronPort, the latest attack reflects an observed 220% increase in the volume of threats confirmed by data gathered from corporate consumers from May 2007 to May 2008.

Backdoor and password stealing applications grew by 855%, and risk of exposure to compromised sites increased by 407%.