Notice
This is a Low-Profiled Threat Notice for FakeAlert-DA, FakeAlert-EL and OSX/Puper.a

Justification

FakeAlert-DA, FakeAlert-EL and OSX/Puper.a has been deemed Low-Profiled due to media attention at :

http://www.theregister.co.uk/2009/07/21/an...o_malware_ruse/.

Reference of this is also available in one of our blogs at :

http://www.avertlabs.com/research/blog/ind...a-video-player/


Read About It

Information about FakeAlert-DA, FakeAlert-EL and OSX/Puper.a is located on VIL at :


FakeAlert-DA - http://vil.nai.com/vil/content/v_157489.htm
FakeAlert-EL - http://vil.nai.com/vil/content/v_169445.htm
OSX/Puper.a - http://vil.nai.com/vil/content/v_154438.htm


Detection
FakeAlert-DA was first discovered on May 22, 2009
FakeAlert-EL was first discovered on June 24, 2009
OSX/Puper.a was first discovered on March 26, 2009

The 5684 DAT file that will be released on July 23, 2009 pro-actively provides coverage for FakeAlert-DA, FakeAlert-EL and OSX/Puper.a under all products.


If you suspect you have FakeAlert-DA, FakeAlert-EL and/or OSX/Puper.a, please submit a sample to http://www.webimmune.net