Attention customers: There is a new scam email that contains a ZBOT Trojan virus. Please do not open the zip file or follow the link. The "New Settings File" email will look something like the examples below and appear to be from your company domain. Please distribute this to your staff.
Virus Message Examples:
* * * * *
Subject: A new settings file for the gary@123.com has just been released
To: Gary Jones [gary@123.com]
Attached file: install.zip
Dear user of the 123.com mailing service! We are informing you that because of the security upgrade of the mailing service your mailbox gary@123.com settings were changed. In order to apply the new set of settings open zip attached file. Best regards, 123.com Technical Support.
* * * * *
Subject: A new settings file for the david@abcinc.com
Dear user of the abcinc.com mailing service! We are informing you that because of the security upgrade of the mailing service your mailbox (david@abcinc.com) settings were changed In order to apply the new set of settings click on the following link: http://abcinc.com/owa/service_directory/settings.php?email=david.s@abcinc.com&from=abcinc.com&fromname=david.s
* * * * *
Please be careful not to be fooled by this email. Don’t open the zip file or click on the hyperlink! Shift and delete - get it out of your machine straight away! For more detailed information on this virus, please see below. Virus Information: http://blog.mxlab.eu/2009/10/14/zbot-variant-masked-as-settings-file-for-ms-outlook/ ZBot virus variant. "Regarding ZBot: it is a trojan that disables firewall, steals sensitive financial data (credit card numbers, online banking login details), makes screen snapshots, downloads additional components, and provides a hacker with the remote access to the compromised system."
- Jim Bunnell, President
No comments:
Post a Comment