Menu
Phishing campaign touts Heartbleed removal tool

Phishing campaign touts Heartbleed removal tool

The program attached to the emails is actually a keylogger, according to Trend Micro

Trend Micro is warning of a phishing campaign touting a "Heartbleed removal" tool, a nonsensical product that is actually malicious software.

The scammers are hoping to trick people who vaguely associate the nickname "Heartbleed" with a computer problem that needs to be fixed.

Heartbleed in fact was a large problem, but not one for desktop computers. It was a vulnerability in older versions of OpenSSL, a crucial piece of open-source software that enables encrypted communications between a computer and a Web service, indicated by the padlock in most browsers.

The Heartbleed flaw was especially dangerous since OpenSSL is widely used in operating systems, routers and networking equipment. The flaw could allow an attacker to pull potentially sensitive data in 64K chunks from a server, including login credential and private SSL keys.

Fixing OpenSSL required applying a server-side patch. End users only needed to change their passwords on Web services that were affected.

The phishing emails seen by Trend Micro have an attachment that is supposedly a software tool that removes Heartbleed, wrote Trend Micro's Gary Davis, vice president for global consumer marketing. The tool is actually a keylogger, which records keystrokes and sends the content to the attackers.

The phishing emails are suspicious for other reasons, though, which may diminish their pool of potential victims.

Davis wrote the emails have a subject line "Looking for Investment Opportunities from Syria," a country that has seen civil unrest for several years. Further in the pitch is a warning that people should run the attached program to ensure they're not infected with the Heartbleed "virus," he wrote.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk


Follow Us

Join the newsletter!

Error: Please check your email address.

Tags securitymalwaredata protectiontrend micro

Featured

Slideshows

Looking back at the top 15 M&A deals in NZ during 2017

Looking back at the top 15 M&A deals in NZ during 2017

In 2017, merger and acquisitions fever reached new heights in New Zealand, with a host of big name deals dominating the headlines. Reseller News recaps the most important transactions of the Kiwi channel during the past 12 months.

Looking back at the top 15 M&A deals in NZ during 2017
Kiwi channel closes 2017 with After Hours

Kiwi channel closes 2017 with After Hours

The channel in New Zealand came together to celebrate the close of 2017, as the final After Hours played out in front of a bumper Auckland crowd.

Kiwi channel closes 2017 with After Hours
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP honoured leading partners across the channel at the Partner Awards 2017 in New Zealand, recognising excellence across the entire print and personal systems portfolio.

Meet the top performing HP partners in NZ
Show Comments