[CompSoc-News] Latest worm

compsoc-news at skynet.ie compsoc-news at skynet.ie
Thu Mar 4 12:19:15 GMT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There is a worm spreading now (Bagle I think) that forges the From:
address to look like it's coming from an administrator of the system
it's delivered to. Eg. If the mail is sent to user at skynet.ie, the mail
seems to come from administrator at skynet.ie or support at skynet.ie or
something similar. The subject line is generally something like "E-mail
account security warning", and the message contains a password protected
zip file. The body of the message contains the password required to open
the zip file.

This mail is a worm, and was not sent from any administrator on Skynet.
Also, the worm only affects Microsoft Windows machines (surprise
surprise!). If you receive this mail, or any mail like it, you can
delete it. If Skynet administrators have to send you an email relating
to your email account or anything else relating to your Skynet account,
the details will be in the body of the mail, and not in any attachment.

If you are unsure about any mails you receive which look to have come
from an administrator at Skynet, email sysadm at skynet.ie and the issue
will be cleared up.

- -- 
Chat ya later,

John.
- --
BOFH excuse #1: clock speed
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQFARx7AQBw+ZtKOvTIRApkJAJ9xTZOQtrHHYSD9nd1YMb3oN5lszQCdE4We
3S1WmXmthVw7XjZWQx18mfw=
=zJnb
-----END PGP SIGNATURE-----


More information about the CompSoc-News mailing list