New Storm Worm - Features dangerous animated e-card links
Below are recent samples (with all URLs made safer) of email that should be deleted or blocked. The numerical links found in these messages may trigger an AUTOMATIC download and install of a very malicious copy of the Nuwar worm. This family of viruses is among the most advanced malware circulating using rootkit, botnet, polymorphism, and other techniques.
AV Protection may or may not be available for these new leading edge variants. It's always advisable to never click on URLs or attachments whenever possible in email messages - even in those which may appear to be safe.
==========================================
From: *********
To: Harry
Subject: Movie-quality e-card
Date: Mon, 13 Aug 2007 10:27:08 -0400
Mother() has created Movie-quality e-card for you at perfectgreetings.com.
To see your custom Movie-quality e-card, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
hxxp://[URL REMOVED - DANGEROUS numeric IP address]/?bd9a4815755ec21d93815f9518b32f6c9fb697
Send a FREE greeting card from perfectgreetings.com whenever you want by visiting us at: hxxp://perfectgreetings.com/
This service is provided and hosted by perfectgreetings.com.
==========================================
From: *********
To: Harry
Subject: Animated postcard
Date: Tue, 14 Aug 2007 12:40:40 +0200
School-mate() has created Animated postcard for you at greetingsisland.com.
To see your custom Animated postcard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
hxxp://[URL REMOVED - DANGEROUS numeric IP address]/?23407b969d2b1d96eb463c6da46ca
Send a FREE greeting card from greetingsisland.com whenever you want by visiting us at: hxxp://greetingsisland.com/
This service is provided and hosted by greetingsisland.com
==========================================
From: *********
To: Harry
Subject: Greeting ecard
Date: Tue, 14 Aug 2007 02:53:35 -0400
Uncle() has created Greeting ecard for you at hallmark.com.
To see your custom Greeting ecard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
hxxp://[URL REMOVED - DANGEROUS numeric IP address]/?42a6de1712445fd9c2b5
Send a FREE greeting card from hallmark.com whenever you want by visiting us at: hxxp://hallmark.com/
This service is provided and hosted by hallmark.com.