The death of Korean leader Kim Jong Il resulted in an outpour of reactions from many people all over the world. Some people were saddened by the loss, while some were quite jubilant, saying that Kim Jong Il was “a repressive leader”.
Cybercriminals, on the other hand, only had one reaction to the incident, and it was to take advantage.
Our researchers found spam messages with email subjects mentioning the death of Kim Jong Il. The messages arrive with a .PDF attachment that has the file name brief_introduction_of_kim-jong-il.pdf.pdf. The said file is of course malicious and is detected as TROJ_PIDIEF.EGQ.


Here at TrendLabs, the death of a globally known person has become an automatic trigger for us to look for attacks trying to taking advantage in order to protect our customers who are trying to look for more information. Such events generate global interest in a very short amount of time, so they make very good social engineering lures.
Under such circumstances, people are advised to stick to trusted sources when trying to get more information about noteworthy events. Trend Micro users are already protected from the abovementioned attacks through the Trend MicroT Smart Protection NetworkT, as both the spam messages and the malicious files are already blocked and detected respectively.
Other political figures whose deaths were also used by cybercriminals as lure include:
Leave a reply