Share with your network!
The Zeus botnet is making another attempt at stealing your personal information this week. Starting early in the morning on 1 December 2009, email messages began going out telling recipients that they need to register themselves in the CDC's H1N1 program. Messages with subject lines like "Create your personal Vaccination Profile" and "Governmental registration program on the H1N1 vaccination" are enticing recipients to visit a webpage proudly displaying the Center for Disease Control logo, from which they can download their "H1N1 Vaccine Profile Archive". The 'archive' is, in reality, the installer program for the Zeus bot, which will place a keylogger on your machine and try to steal your personal data.
Most anti-virus vendors have signature updates that will mark this installer as malware, so one way to protect yourself is to make sure that your A/V software is up to date. All of the fake CDC URLs we visited were detected as forgeries by the newest versions of Firefox, as well.