Storm Worm Alert

by certifiedbug on July 9, 2007

in Security

The subject matter varies, all such emails are bad news and an attempt to get people to download an exe file.

Sample:

Virus Activity Detected!
Dear Customer,

Our robot has detected an abnormal activity from your IP adress
on sending e-mails. Probably it is connected with the last epidemic
of a worm which does not have official patches at the moment.

We recommend you to install this patch (< --- concealed link) to remove worm files
and stop email sending, otherwise your account will be blocked.

Postmaster

SANS: The ever morphing Storm

AusCERT: High volume of email linking to the “Storm Worm” malware

Previous post: Trojan Uses Generated Yahoo and Hotmail Accounts

Next post: The Microsoft MVP Program, how it works