[jaws-uk] Re: Trojan Warning - This is definitely NOT a hoax.

I've had loads of these, they're dodgy all right.
-----Original Message-----
From: jaws-uk-bounce@xxxxxxxxxxxxx [mailto:jaws-uk-bounce@xxxxxxxxxxxxx] On
Behalf Of George Bell
Sent: 22 August 2007 07:55
To: undisclosed-recipients:
Subject: [jaws-uk] Trojan Warning - This is definitely NOT a hoax.

Sorry if you see this many times, but this is a genuine authenticated
warning on my part, and potentially serious.

If you receive any messages similar in format to the one below my signature,
delete them immediately. [I have removed unsafe matter in the sample] They
are easy enough to recognise as they suggest you have joined something, and
give you a Confirmation Number, Login ID and Temporary Password.  You are
then told to follow a link to an IP address.

Here is what a highly reliable contact of mine at Microsoft has said.

"The link takes you to a site using the MPACK toolkit to try to download a
range of malware based around the Win32 Storm Trojan."

"We are shutting them down as fast as we can but most of the sites are in
eastern europe".

You have been warned, so please delete any such messages immediately.

George Bell.

Sample message follows:-

-----Original Message-----
From: User [address deleted] On Behalf Of [Deleted]
Sent: Wednesday, August 22, 2007 6:50 AM
To: 
Subject: Membership Support [but Subject varies]

Welcome Member,

Welcome To Office Antics.

Confirmation Number: 74753533
Login ID: user8196
Temorary Password: in555

Please Change your login and change your Login Information.

Follow this link, or paste it in your browser: [Link to an IP address
deleted]

Enjoy,
Membership Support Department
Office Antics

** To leave the list, click on the immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** jaws-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** jaws-uk-request@xxxxxxxxxxxxx with the Subject:- faq


__________ NOD32 2474 (20070822) Information __________

This message was checked by NOD32 antivirus system.
http://www.eset.com


** To leave the list, click on the immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** jaws-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:jaws-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to 
** jaws-uk-request@xxxxxxxxxxxxx with the Subject:- faq

Other related posts: