We have just discovered another spam message used to fool users into installing a new banking Trojan (Trj/Banker.LGC). This time it passes itself off as if it were a real piece of news from El Pais, one of the major newspapers in Spain. It is about a car accident that would have taken place today in Bilbao and where Fernando Alonso, the two-time Formula 1 world champion has been supossedly seriously injured.
As I'm writing this post from Bilbao, I can guarantee that there has not been any car accident in which Fernando Alonso is involved…
The link to download the video points to the Trojan. This is a screenshot of the fake piece of news:
The banking Trojan targets one of the biggest Spanish banks, which in the past was one of the Fernando Alonso's team sponsors.
This is not the first time we have seen this piece of news used to spread malware though, as a few weeks ago we saw a very similar one, the major difference was that it was trying to install a Gaobot worm instead.