I bet you have never seen such a tempting Trojan before. The Trojan named Melissa Strip, identified as TROJ_CAPTCHAR.A by TrendMicro and Trj/RompeCaptchas.A by Panda is a very polite one as it asks you on start up whether you want to play a game. If you do, you basically start a game where you need to enter captchas correctly for the trojan to strip for you.
After clicking Start Play the image of a women on the left side and a captcha on the right is displayed. The program asks you to enter the captcha to see another picture of the woman with less clothes on. After entering the captcha correctly and clicking on enter the Trojan loads another picture and captcha asking the user again to type the correct code to see Melissa strip even more.
You might have already guessed that the captcha is actually the captcha of another website, Yahoo for instance, and the Trojan uses the help of users to enter those captchas correctly on those websites. Captchas are used to tell human users from bots apart and make it more difficulty to create automatic process to signup or submit data.
The Trojan does not seem to cause harm on the users system. It simply uses the input to create correct responses to captcha codes that are used to create accounts on websites like Yahoo Mail.
Trend Micro reports that the Trojan most likely arrives as a file downloaded or via other malware on the system. It may also be distributed via email attachments, one of the most common forms of distributing malware.
It is recommended to delete the program right away and scan your system with up to date antivirus software such as Malwarebytes Anti-Malware to remove all traces of the program from your system.
Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.
We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats (video ads) or subscription fees.
If you like our content, and would like to help, please consider making a contribution:
Ghacks is a technology news blog that was founded in 2005 by Martin Brinkmann. It has since then become one of the most popular tech news sites on the Internet with five authors and regular contributions from freelance writers.