 W32/Dref-N
Worm spreads News of Presidential Deaths - 08/11/2006 |
Computer users are being warned by experts of a new email-aware worm that
poses as a number of false breaking news stories. These include the
outbreak of nuclear war and the death of George W Bush and Vladimir Putin.
These are not legitimate emails and are an attempt by hackers to infect
computers and steal information.
The
W32/Dref-N worm arrives in messages with one of the following subject
lines: “White House News!”, “Read and Respond ASAP”, “News”, “ATTN:
Everybody”, “Incredible News!”, “ATTN”, “Urgent News” and “URG”, while the
text in the message is chosen from the following:
3rd
Glogal War Just Started!!! Read more in file!
Nuclear War in Russia! Read
news in file!
President Bush DEAD! Read
attached file!
Putin and Bush starts NUCLEAR
WAR! Check the file!
Nuclear WAR in USA! Read
attached file!
GLOBAL NUCLEAR WAR JUST
STARTED! News in file.
President Putin dead! Read more
in attached file!
The
attached file that users are asked to open are labled as one of the
following: truth.exe,
last.exe,
lasest news.exe,
never.exe,
war.exe,
about me.exe,
a.exe,
read me.exe, or
open.exe .
Upon opening the file the user’s windows firewall is immediately disabled
allowing hackers to gain access to their system.
Graham Cluley of Sophos explains why this virus is able to infect so many
computers, "users may think that they are receiving these emails from
their friends, family and colleagues, but in fact it is a worm that has
infected the sender's computer and distributed the message."
How
can users protect against these types of attacks?
The answer lies with ArmourPlate. Since viruses are usually more prevalent
and more damaging to networks than hackers and crackers are, e-mail users
should be instructed to be exceedingly careful about the attachments they
open, especially those from unknown sources. While this will help with the
vast majority of e-mail-borne malicious code, organizations can eliminate
the risk of opening infected files completely by ensuring that they have
antivirus protection such as ArmourPlate in place.
ArmourPlate stops viruses dead before they even get a chance to reach
organization's networks, by using three respected anti virus software
suites and its own proprietary technology that detects and stops new
viruses that have not yet been discovered.
In short, ArmourPlate would work alongside your existing systems to
safeguard your company's internal network, preventing it from malicious
virus and email attacks and clogging with
spam, which causes costly downtime. By both in-bound and out-bound
scanning, your professional reputation with your staff, clients, partners
and peers is protected. ArmourPlate is brought to you with outstanding
recommendations and eliminates the need for organizations to worry,
creating complete peace of mind.
Source: Sophos
|
CONTACT
US
]
