Troj/Bredo-AEG

Posted: December 18, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	9/10
Infected PCs:	30

First Seen:	December 18, 2012
Last Seen:	April 14, 2022
OS(es) Affected:	Windows

Troj/Bredo-AEG is a Trojan that's distributed in fake airline e-mail messages that are spammed out to seemingly random targets. Like the majority of Trojans from the Bredo category, Troj/Bredo-AEG appears to be purposed to compromise the infected PC's security and may be used in backdoor attacks that can allow high-level PC threats to be installed without your permission, amongst other likely problems. Because Troj/Bredo-AEG requires you to download and launch a malicious file attachment for its installation, SpywareRemove.com malware analysts have found the best way to protect your computer from Troj/Bredo-AEG is to delete suspicious spam e-mails habitually. If your computer does become infected by Troj/Bredo-AEG, you should use anti-malware products to detect and delete Troj/Bredo-AEG, which is likely to complicit in other attacks that may install additional malware.

Troj/Bredo-AEG: Booking Your Passage to PC Infection

Troj/Bredo-AEG is distributed by the latest spam-based attacks that use the Australian airline company of Jetstar as their excuse to land in your e-mailbox. Trojans from the Bredo family often use e-mail as a favored infection vector – usually as an opening salvo in an attempt to open backdoors on compromised Windows computers. SpywareRemove.com malware researchers have noted that Troj/Bredo-AEG's e-mail spam uses a well-designed visual template that references the Jetstar marketing newsletter, merchandising and other company-related paraphernalia. This has led to some victims of Troj/Bredo-AEG attacks claiming that Jetstar's e-mail communications have been compromised, although there's nothing that Jetstar – or any other company – can do to stop spammers that forge e-mail addresses and use convincingly-designed e-mail templates to present themselves as something other than what they really are.

In spite of its flashy content, the real punchline to a Troj/Bredo-AEG e-mail is its file attachment, which is claimed to be a flight itinerary. Of course, this file actually is an installer for Troj/Bredo-AEG, which is used for botnet-based attacks. Common issues that SpywareRemove.com malware analysts have observed linked to 'zombie malware' like Troj/Bredo-AEG include:

Because Troj/Bredo-AEG can conduct its functions as part of a hidden background process that's launched automatically, your PC may experience unusual performance issues that are caused by Troj/Bredo-AEG using RAM and other system resources.
Troj/Bredo-AEG may use your PC to launch DDoS attacks and similar external assaults that can be used to transfer stolen information, crash sites or cause other crimes with the help of your computer's resources.
Troj/Bredo-AEG will modify your security settings so that Troj/Bredo-AEG can make contact with remote servers at will, making your firewall and similar network security tools effectively useless even if they appear to be enabled as normal.

Jumping Off of Troj/Bredo-AEG's Kamikaze Plane Before It Lands Your Computer in a Disaster Zone

Troj/Bredo-AEG is likely to use code injection attacks and related techniques to avoid being seen, although anti-malware programs should be able to detect Troj/Bredo-AEG when it's necessary. Based on the previous attack patterns of Bredo Trojans, SpywareRemove.com malware experts consider it likely that Troj/Bredo-AEG infections will be accompanied by other forms of malware that also should be uncovered through suitably thorough anti-malware scans.

However, while deleting Troj/Bredo-AEG with a good anti-malware scanner shouldn't be difficult, it's obviously preferable to delete the fake Jetstar spam that carries Troj/Bredo-AEG in the first place. Doing so will guarantee that your PC will not be modified by Troj/Bredo-AEG or otherwise harmed by Troj/Bredo-AEG-related attacks.

Troj/Bredo-AEG

Threat Metric

Troj/Bredo-AEG: Booking Your Passage to PC Infection

Jumping Off of Troj/Bredo-AEG's Kamikaze Plane Before It Lands Your Computer in a Disaster Zone

Leave a Reply