| MrsCoLdFuSiOn | 2006-06-23 13:11:00 |
![]() Posts: 115 Topics participated: 73 Topics started: 41 First post: 2006-06-22 21:06:00 Last post: 2008-09-08 14:47:00 |
8Pt;line-height:100%'> BBC NEWS UK Last Updated: Thursday, 24 November 2005, 11:20 GMT Fake FBI virus catches net users A Windows virus that warns users about illegal net use is spreading online. 8Pt;line-height:100%'>One variety of the virus promises images of Paris Hilton The bug-bearing message claims to come from either the FBI, CIA or German BKA police agency, and warns users they have been detected visiting illegal sites. Those opening a questionnaire attached to the message will be infected by a variant of the well-known Sober virus. Anti-virus firms have caught millions of copies of the malicious program, suggesting a lot of people have fallen for the fake warning. Web watch The Windows virus started circulating on 22 November and mail filtering firm MessageLabs said it caught almost three million copies of the Sober variant in the first 24 hours of the outbreak. By the end of Wednesday Postini said it had netted more then seven million copies of the bug. The virus travels in an e-mail message with the subject line of "You visit illegal websites" or "Your IP was logged". SOBER SUBJECT LINES You visit illegal websites Your IP was logged Your_Password Registration Confirmation Your Password Mail delivery failed smtp mail failed hi,_ive_a_new_mail_address Account Information Ihr Passwort Mailzustellung wurde unterbrochen SMTP Mail gescheitert Ermittlungsverfahren wurde eingeleitet Sie besitzen Raubkopien RTL: Wer wird Millionaer Paris Hilton & Nicole Richie The body text of the message makes it appear as if the recipient has been caught by the FBI, CIA or BKA browsing 30 illegal sites and asks them to fill in an attached form about this activity. Anyone clicking on the attached form gets a fake error message while, in the background, the virus starts plundering an infected PC for e-mail addresses to send itself to. Responding to the outbreak the FBI said: "These e-mails did not come from the FBI." It added: "Recipients of this or similar solicitations should know that the FBI does not engage in the practice of sending unsolicited e-mails to the public in this manner." The virus also comes in varieties that purport to hold a video of Paris Hilton, fake password change notices and e-mail error messages. It can only infect those using Windows PCs. F-Secure said the outbreak was the "biggest of the year" and Symantec said the virus was spreading very fast in the wild. Statistics gathered by Trend Micro suggest that most victims were in North America. The spread of the virus slowed on Wednesday but anti-virus firms urged users to update their protection and not to click on attachments to unsolicited e-mail messages. The first Sober virus was found in October 2005 and there have been 25 variants released since then. This latest variant checks to see if a machine has been infected by earlier versions and tries to shut them down so it can do its work. |
![]() |
Fake FBI virus
| CoLdFuSiOn | 2006-06-23 13:14:00 |
![]() Posts: 2312 Topics participated: 1240 Topics started: 124 First post: 2006-02-25 21:12:00 Last post: 2009-01-03 14:56:00 |
I always thought the FBI was fake! :P |
![]() |
| laffin | 2006-06-23 13:28:00 |
![]() Posts: 1378 Topics participated: 601 Topics started: 11 First post: 2006-02-25 01:34:00 Last post: 2008-12-22 14:17:00 |
Looks like the board got hit by this variant One variety of the virus promises images of Paris Hilton As I do see Paris Hilton there..... |
![]() |
| bodhisattva | 2006-06-23 15:42:00 |
![]() Posts: 328 Topics participated: 151 Topics started: 9 First post: 2006-02-25 02:06:00 Last post: 2008-11-14 07:15:00 |
been noticing alot of paris and nicole messages and other random weird variations in my junkboxes with 75KB attachments. i knew something must be afoot. and laffin, you're a virus detector! |
![]() |
Similar threads
| Topic | Posts | Last post |
|---|---|---|
| Fake User? | 4 | 2007-06-25 19:57:00 |
| Fake Peer-list | 11 | 2007-11-16 07:11:00 |
| Fake login page | 15 | 2008-12-29 21:51:00 |
Statistics
| Today's active topics · | |
|---|---|
| User(s) active in the past 30 minutes | |
| 59 Guests, 16 Members rambow, DivxLover, ticsyboy, ziongaber, NickoSLH, b3wk, Mr.dude, FinTaRa, Hossam, Sushi, pedro84, Sennap, inks2002, eriks, Simulator, darkruss1991 pozycjonowanie i optymalizacja , Wiadomości , Opony letnie , anteny , nieruchomości bułgaria Obrazki alveo zabawki ubranka dziecięce Wierszyki | |
| Often viewed topics | |
| · Preliminary XSS... · RSS feed passke... · Invite With Bonus · Browse.php · new Message · Torrent Inline ... · torrent uppload... · Save PMs to temp! · Similar torrent... · Work with mod_r... · Nice signup usi... · Stats on index · browse.php · action script · hash fails???:S · Ratio Master · User/ID · Warned users (o... · Question about ... · Rating using ajax | |
| Forthcoming Calendar Events within the next 5 days | |
| There are no forthcoming calendar events | |




