Dozens of Super Bowl Websites Hacked and Installing Trojan Backdoors on Windows Computers of Football Fans   2/5/2007 - 1,848 views,

Dozens of websites related to the Super Bowl, including the Miami Dolphins website and affiliated websites, have been hacked and are installing the Superbowl Trojan on any unfortunate Windows machine that visits any of these website without adequate protection. The Super Bowl Trojan than gives full access and control of the infected Windows machine to the hackers, who are based out of China.

Windows machines which have been exploited by the Superbowl Trojan will have connected to the Chinese hacker site dv521.com, and had the file W1C.exe download to their machine. W1C.exe in turn installs the Wow-PK Trojan, which is a key-logging Trojan, which records all of your keystrokes, such as when you enter a password from your computer.

Explained Dan Hubbard, VP of Security Research at Internet security company Websense, “Assuming you’re not patched, a Trojan downloader with a backdoor and a password stealer gets installed on your computer without you knowing it”

The vulnerabilities being exploited by the Superbowl trojan affect Internet Explorer (IE) 5, 6, and 7. The fixes for them can be found here and here.