Just how sick can a hacker get?

Filed Under: Malware, Spam

Bouncing babies

Just how sick in the head do you have to be if you're a computer criminal?

We've seen them exploiting misery in all imaginable ways: from natural disasters such as tsunamis and hurricanes,to terrorist bombings and even mining accidents.

Today we saw a large amount of malicious spam claiming that the recipient's baby child had been kidnapped, and demanding a $50,000 ransom.

Of course, if you were foolish to look at the "photos" you would be opening up your Windows PC to a malware infection by the Troj/Resex-Fam Trojan horse, which then downloads further malicious software from the internet.

Before you know it hackers have taken control of your PC, and are stealing your identity, or using your computer as a spam relay, or launching distributed denial-of-service attacks, or - indeed - all of the above!

The email claims that your baby has been kidnapped

The email claims that your baby has been kidnapped.

More information about this attack can be found in the advisory we posted on the Sophos website, and on the SophosLabs blog.

This should be a reminder to everyone - even if a trick seems disgusting and beyond belief, it's not too low for a hacker to consider using. It's all very depressing, but sadly not at all surprising.

To try and cheer myself up, I've illustrated this blog story with a screen capture of an old DOS game from yesteryear - "Bouncing babies". It's a distant reminder of the halcyon days before we had to worry about email attacks, before we were troubled by spyware, and when sunshine was a regular fixture of the English summer.

You might like

14 Responses to Just how sick can a hacker get?

  1. MissRarity · 498 days ago

    ... it just sounds so casual "hey we have kidnapped your baby"
    Seriously.
    Who talks like that?
    If they wanted it to sound real they could at least TRY to make it sound scary

    • Banquo · 493 days ago

      I think there is some presumptuousness on the part of some spammers/hackers about how English is typically used, as well as a poor grasp of proper grammar. "We have hijacked your baby". M'kay.......

      • Freida Gray · 475 days ago

        They've even attached a picture of your fume.What's a fume?

        • Barbara E Bj · 177 days ago

          The only meaning for "fume" that I know of is either "to fume" meaning to be angry or "fumes" meaning foul smelling gaseous emanations of a fire or other source.

  2. Berne · 468 days ago

    Do you have to call them a hacker?

  3. Ronald Hacker · 463 days ago

    I agree, cybercriminal != hacker. When this article was written in 2008 when the term hacker had more of a negative conatation. Hindsight!

    • Barbara E Bj · 177 days ago

      "hacker" should still have a negative connotation to all regardless of the purported motives of those who are executing the hacks. All hackers are deviants who seek to harm you, even those who pretend that they are doing it to help someone else. All criminals conjure excuses for their behavior in the effort to solicit supporters and defenders. Don't be fooled. They are still deviants.

  4. Mick A · 456 days ago

    Hey you reading this! I have taken control of your Blackberry/iPad/iPhone/Delete as Appropriate/Other.

    Yes you know who you are, sitting there reading this stuff, oh yeah! I'm going to sell nude pictures of you I got whilst I took over your webcam when you were erm... nude.

    I'm sure no-one would fall for the nonsense I have written above; therefore I can't imagine why someone would rush to open the picture sent with an email claiming to have kidnapped their baby. It just doesn't make sense to me. I don't know about the rest of the world, but where I come from babies are usually supervised or at least within view of someone who normally doesn't have kidnapping tendencies.

  5. Mo Jo Ham · 428 days ago

    Where I come from, babies kidnap hackers.

  6. jesse2253 · 427 days ago

    They hardly tried to make it realistic...
    I can't imagine anyone falling for it..

  7. Steven · 418 days ago

    Oh I see and so true - I get email discussing another subject, yet lured to to see porn or the phishing email to click the attachments, when they could of wrote on the page.

  8. sdkahsdjgsdhjkasd · 379 days ago

    its simple
    people will download that file open it and their pc gets infected.

  9. Tired Mom · 371 days ago

    They want to kidnap my kids? Good. They'll return them in 6 hours.

  10. Matt Fletcher · 280 days ago

    Hijacked? Hijacked!? Actual laugh out loud moment. I think they meant kidnapped- it's a baby not a bus.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley is an award-winning security blogger, and veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.