Daily Talk Forum
  • Advertise
  • Search
  • Member List
  • Calendar
Hello There, Guest! Login Register
Daily Talk Forum › General Discussions › Technology, Computers and the Internet v
« Previous 1 ... 31 32 33 34 35 ... 41 Next »

Worm Attack Masquerades As IE7 Download Offer



Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Threaded Mode | Linear Mode
Worm Attack Masquerades As IE7 Download Offer
Jaggernaut Offline
Gold Member
*****
Gold Members

Posts: 940
Joined: Mar 2007
Reputation: 3
Post: #1
Worm Attack Masquerades As IE7 Download Offer

Quote:By Sharon Gaudin

E-mails display an image that invites users to download a beta of a new version of Internet Explorer 7, but instead they are hit with the Grum-A worm.

A security company issued a warning Friday about a widespread attack that's masquerading as an offer from Microsoft to download a version of Internet Explorer 7.

The e-mails, which claim to come from admin@microsoft.com and have the subject line "Internet Explorer 7 Downloads," display an image that invites users to download beta 2 of Internet Explorer 7, according to an advisory from Sophos, a security company. Users who make the mistake of clicking on the link in the message, though, instead are infected by the W32/Grum-A worm.

"Worms like this are only succeeding in spreading because so many people have still not learned to be suspicious of unsolicited e-mails, even if they claim to come from well-known companies like Microsoft," said Graham Cluley, senior technology consultant for Sophos, in a written statement. "The problem is that to the casual observer the e-mail looks genuine, and the image displayed looks near-identical to the imagery that Microsoft is using on its Web site to promote Internet Explorer 7.0. Clicking on the image, however, doesn't download the real beta, but malicious code straight from the hackers."

The Grum worm is an appender virus that infects executable files referenced by Run keys in the Windows Registry. When activated, it copies itself to \winlogon.exe and makes changes to the Registry. It also edits the HOSTS file, injecting a thread into system.dll and attempts to patch two system files.

Cluley noted in the advisory that it's an old trick for hackers to mask their attacks as communications from Microsoft. In 2003, the Gibe-F worm, which also was known as Swen, was disguised as a critical Microsoft security update, and in 2005, hackers directed duped users to a bogus and malicious Web site masquerading as a Microsoft update page.

You have been warned!Icon_redface
04-01-2007 03:48 PM
Find all posts by this user Quote this message in a reply
forwardone Offline
Gold Member
*****
Gold Members

Posts: 6,705
Joined: May 2006
Reputation: 15
Post: #2
RE: Worm Attack Masquerades As IE7 Download Offer

I saw the title to an e-mail I received which looks as though it came from these low lifes. I didn`t even read the e-mail, I just deleted it.
04-01-2007 05:23 PM
Find all posts by this user Quote this message in a reply


« Next Oldest | Next Newest »
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Worm attack chaos fails to strike forwardone 0 817 04-01-2009 11:17 AM
Last Post: forwardone
  Worm causes computer crash cyrano 0 784 02-25-2009 04:32 PM
Last Post: cyrano
  Firefox crosses 500 million download mark cyrano 0 798 02-23-2008 07:10 AM
Last Post: cyrano
  Yahoo Rejects Microsoft Offer forwardone 0 776 02-11-2008 09:16 PM
Last Post: forwardone
  Skype Warns Users about Circulating Worm nunulka 0 1,118 09-13-2007 05:19 PM
Last Post: nunulka

  • View a Printable Version
  • Send this Thread to a Friend
  • Subscribe to this thread
Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Advertise on Daily Talk Forum
  • Webmaster Forum
  • cPanel Hosting
  • SEO Directory
  • Toronto
    • Contact Us
    • Daily Talk Forum
    • Return to Top
    • Lite (Archive) Mode
    • RSS Syndication
    • Help
    • Portal
    • Membership
    • Advertise
    • Banners
    • Privacy
    • Rules

    • Review DTF at Alexa
    • Review DTF at Nortons
    • Site Map

    • Links
    • Your Link Here
    Current time: 04-19-2021, 10:17 AM Powered By MyBB, © 2002-2021 MyBB Group Theme created by Justin S