Tofger

[AndyMac]

Hi,

Anyone know how this family of trojans spread? I can find info on what it
does (keylogger, sends logs by smtp or by ftp to hard-coded site) but not on
how it spreads? Is it email attachment only? Does it exploit a known
vulnerability (particularly XP as this is the only wild infection I've
seen)?

Thanks,

AndyMac.

 

[Pepperoni]

Trojans do not self-replicate. They are spread manually, often under the
premise that the executable is something beneficial. Distribution channels
include IRC, peer-to-peer networks, newsgroup postings, etc.
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100831