[access-uk] Re: Trojan Warning - This is definitely NOT a hoax.

  • From: "Steve Nutt" <steve@xxxxxxxxxxxxxx>
  • To: <access-uk@xxxxxxxxxxxxx>
  • Date: Wed, 22 Aug 2007 08:04:14 +0100

Hi George,

I agree this is certainly not a hoax, but the old rule applies.  Never hit a
link that you don't know, or if the Email is not from someone you either
expect or trust.  So long as you don't hit any links in this Email, you will
be OK.

All the best

Steve

-----Original Message-----
From: access-uk@xxxxxxxxxxxxx [mailto:access-uk@xxxxxxxxxxxxx] On Behalf Of
George Bell
Sent: 22 August 2007 07:55
To: undisclosed-recipients:
Subject: [access-uk] Trojan Warning - This is definitely NOT a hoax.

Sorry if you see this many times, but this is a genuine
authenticated warning on my part, and potentially serious.

If you receive any messages similar in format to the one
below my signature, delete them immediately. [I have removed
unsafe matter in the sample] They are easy enough to
recognise as they suggest you have joined something, and
give you a Confirmation Number, Login ID and Temporary
Password.  You are then told to follow a link to an IP
address.

Here is what a highly reliable contact of mine at Microsoft
has said.

"The link takes you to a site using the MPACK toolkit to try
to download a range of malware based around the Win32 Storm
Trojan."

"We are shutting them down as fast as we can but most of the
sites are in eastern europe".

You have been warned, so please delete any such messages
immediately.

George Bell.

Sample message follows:-

-----Original Message-----
From: User [address deleted] On Behalf Of [Deleted]
Sent: Wednesday, August 22, 2007 6:50 AM
To: 
Subject: Membership Support [but Subject varies]

Welcome Member,

Welcome To Office Antics.

Confirmation Number: 74753533
Login ID: user8196
Temorary Password: in555

Please Change your login and change your Login Information.

Follow this link, or paste it in your browser: [Link to an
IP address deleted]

Enjoy,
Membership Support Department
Office Antics

** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq



** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq

Other related posts: