Arabic Trojan horse interrupts adult website surfing with message from Quran, Sophos reports

5 September 2005

Arabic Trojan horse interrupts adult website surfing with message from Koran, Sophos reports Troj/Yusufali-A analyzes the title of the window in focus looking for various words. Some of the words Troj/Yusufali-A searches for are: sex teen xx Phallus jegger Priapus Phallic Penis Exhibitionism If Troj/Yusufali-A finds one of these words in the title bar it will minimise the current window and display the following message in English along with other messages in other languages:

YUSUFALI: Know, therefore, that there is no god but Allah, and ask forgiveness for thy fault, and for the men and women who believe: for Allah knows how ye move about and how ye dwell in your homes.

The message displayed by the Trojan horse

The message displayed by the Trojan horse. Troj/Yusufali-A will continue to display messages if the offending window is left open, and after a while it displays a box in the middle of the screen containing the current time and a button ‘For Exit Click Here’. As soon as the mouse is moved the box changes to have vertical bars and the text ‘OH! NO i’m in the Cage’. The box contains LogOff, ShutDown and Restart buttons and the mouse pointer is locked within the confines of the box. All the buttons actually cause a logout. The keyboard is still useable.

Another message displayed by the Trojan horse

Another message displayed by the Trojan horse.

Advertisements