Another reason not to look at questionable sources when seeking fact on Ebola - some hackers have been exploiting people's fears about the virus to send fake emails, supposedly coming from the World Health Organization (WHO), that will automatically download an attachment that gives hacker access to the computers microphone, camera and can record all keystrokes and websites visited - giving unlimited access to passwords and credit card information that may be keyed in.
The spam containing the malware was identified by the cyber-security firm, Trustwave's SpiderLabs. The company released details of how the email is used to attack victims.
The email's subject line entices the recipient to open it because it supposedly contains life-saving information from WHO on how to stay safe from the Ebola outbreak.
However, when the email is opened, a RAR file is automatically downloaded that contains the program to give the cyber-thieves access to user's computer and information.
The installed malware will also install the "DarkComet Remote Access Trojan" which is undetectable to most anti-virus programs.
The malware only affects Windows systems because Apple does not support RAR files due to its notorious use by hackers to spread spam and viruses.
The SpiderLabs Team added that although the implications of the malware being spread through Ebola related emails seem high risk, fortunately, they do not believe it is a widespread campaign.
Hackers often try to piggy-back on trending and breaking news in order to trick people into opening emails. This particular attack seems to be low volume and "an attempt to infect random users in the hope of gaining some data that can be used or sold," according to SpiderLabs.
In order to keep safe from Trojans and malware spread through spam, cyber-security experts advise to never open emails from suspicious sources. They remind that WHO will not email information to individuals and any unsolicited emails containing attachments and links should be deleted or reported immediately.
In addition to the emails containing the Trojan, other spam emails which should be junked contain link-bait subject lines to fool users into opening them include:
"What you need to know about the deadly Ebola outbreak"
"So Really, How Do You Get Ebola?"
"Is there ANY way to cure Ebola?"
"The #1 Food Items You'll Need In An EBOLA Crisis"
