patsfan
New Member
NEW WORM MASQUERADES AS MS UPDATE
The latest variation on the Sober worm -- Sober.D -- tries to trick
recipients into opening it by disguising itself as a Microsoft Update
message. "It arrives in an e-mail that pretends to be a patch to protect
against a version of MyDoom," says a senior consultant at antivirus firm
Sophos. "The e-mail appears to be a Microsoft
patch so people will of course double-click on that attachment." Once a
user clicks on the file, the worm scans the PC to see if it's already
infected -- if not, it installs itself and uses its own SMTP engine to
send copies of itself to e-mail addresses found on the victim's PC.
Microsoft emphasizes that it does not send patches via e-mail and that
users should ignore such messages. (ZDNet 8 Mar 2004)
http://zdnet.com.com/2100-1105_2-5171243.html
The latest variation on the Sober worm -- Sober.D -- tries to trick
recipients into opening it by disguising itself as a Microsoft Update
message. "It arrives in an e-mail that pretends to be a patch to protect
against a version of MyDoom," says a senior consultant at antivirus firm
Sophos. "The e-mail appears to be a Microsoft
patch so people will of course double-click on that attachment." Once a
user clicks on the file, the worm scans the PC to see if it's already
infected -- if not, it installs itself and uses its own SMTP engine to
send copies of itself to e-mail addresses found on the victim's PC.
Microsoft emphasizes that it does not send patches via e-mail and that
users should ignore such messages. (ZDNet 8 Mar 2004)
http://zdnet.com.com/2100-1105_2-5171243.html
