[ISN] First of perhaps many 9/11 viruses emerges

From: InfoSec News (isnat_private)
Date: Sun Sep 07 2003 - 22:19:32 PDT

  • Next message: InfoSec News: "[ISN] ISO17799 Security News"

    Forwarded from: Muhammad Faisal Rauf Danka <mfrdat_private>
    
    http://www.nwfusion.com/news/2003/0904firstofpe.html
    
    By Dan Verton
    Computerworld
    09/04/03
    
    Antivirus researchers late Wednesday discovered what is being
    described as the first of potentially many "9/11" anniversary viruses
    spreading on the Internet.
    
    While it's too early to tell what, if any, damage the new virus is
    causing, Eric Kwon, president and CEO of San Jose-based Hauri Inc.,
    the company that discovered the virus, said its impact seems to be
    similar to that caused by the recent outbreak of the Sobig worm, which
    overloaded e-mail servers with large volumes of spam.
    
    The 9/11 virus contains the headline "It's Near 911" or a similar
    variation, as well as an attachment labeled "911.jpg." Users should
    not open the e-mail or the attached file.
    
    "Like previous worm viruses, the 9/11 virus collects e-mail lists from
    Microsoft Outlook in order to spread more rapidly, using the
    provocative headline about 9/11 to get the unsuspecting user to open
    the e-mail," said Kwon. "In this case, there also appears to be an
    intention of causing fear, as well as a possible political
    motivation."
    
    Many virus experts have been expecting an outbreak of some kind of
    specific 9/11 virus or worm, and this may be just the first of many to
    appear in the wild during the next two weeks, added Kwon.
    
    Antivirus company Symantec Corp. also identified the virus, which it
    called W32.Neroma@mm, on its Web site, saying it is a "mass-mailing
    worm that attempts to use Microsoft Outlook to e-mail itself to all
    the contacts in the Windows Address Book."
    
    
    
    
    Regards
    --------
    Muhammad Faisal Rauf Danka
    
    _____________________________________________________________
    ---------------------------
    [ATTITUDEX.COM]
    http://www.attitudex.com/
    ---------------------------
    
    
    
    -
    ISN is currently hosted by Attrition.org
    
    To unsubscribe email majordomoat_private with 'unsubscribe isn'
    in the BODY of the mail.
    



    This archive was generated by hypermail 2b30 : Mon Sep 08 2003 - 01:05:59 PDT