Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

New Storm Worm - Features dangerous animated e-card links

Lightning Below are recent samples (with all URLs made safer) of email that should be deleted or blocked. The numerical links found in these messages may trigger an AUTOMATIC download and install of a very malicious copy of the Nuwar worm. This family of viruses is among the most advanced malware circulating using rootkit, botnet, polymorphism, and other techniques. 

AV Protection may or may not be available for these new leading edge variants.  It's always advisable to never click on URLs or attachments whenever possible in email messages - even in those which may appear to be safe.

==========================================

From: *********
To: Harry
Subject: Movie-quality e-card
Date: Mon, 13 Aug 2007 10:27:08 -0400

Mother() has created Movie-quality e-card for you at perfectgreetings.com.

To see your custom Movie-quality e-card, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):

hxxp://[URL REMOVED - DANGEROUS numeric IP address]/?bd9a4815755ec21d93815f9518b32f6c9fb697

Send a FREE greeting card from perfectgreetings.com whenever you want by visiting us at: hxxp://perfectgreetings.com/

This service is provided and hosted by perfectgreetings.com.


==========================================


From: *********
To: Harry
Subject: Animated postcard
Date: Tue, 14 Aug 2007 12:40:40 +0200

School-mate() has created Animated postcard for you at greetingsisland.com.

To see your custom Animated postcard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):

hxxp://[URL REMOVED - DANGEROUS numeric IP address]/?23407b969d2b1d96eb463c6da46ca

Send a FREE greeting card from greetingsisland.com whenever you want by visiting us at: hxxp://greetingsisland.com/

This service is provided and hosted by greetingsisland.com



==========================================


From: *********
To: Harry
Subject: Greeting ecard
Date: Tue, 14 Aug 2007 02:53:35 -0400

Uncle() has created Greeting ecard for you at hallmark.com.

To see your custom Greeting ecard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):

hxxp://[URL REMOVED - DANGEROUS numeric IP address]/?42a6de1712445fd9c2b5

Send a FREE greeting card from hallmark.com whenever you want by visiting us at: hxxp://hallmark.com/

This service is provided and hosted by hallmark.com.

Comments

Ron said:

Thank you for this information. My worst suspicions have been confirmed re the numerous e-card for you emails I have been receiving lately, none of which I have opened as they appeared suspicious, but I am now deleting all of them without opening as they come from "sister"  "family member"  etc and are sent at very unlikely hours from email addresses unknown to me.  You have been a big help.

# August 16, 2007 9:43 AM