[access-uk] Re: Trojan Warning - This is definitely NOT a hoax.

  • From: "Ian Macrae" <ian.macrae@xxxxxxxxx>
  • To: <access-uk@xxxxxxxxxxxxx>
  • Date: Wed, 22 Aug 2007 11:56:43 +0100

I'm getting around a dozen of these a day.   

-----Original Message-----
From: access-uk@xxxxxxxxxxxxx [mailto:access-uk@xxxxxxxxxxxxx] On Behalf
Of George Bell
Sent: 22 August 2007 07:55
To: undisclosed-recipients
Subject: [access-uk] Trojan Warning - This is definitely NOT a hoax.

Sorry if you see this many times, but this is a genuine authenticated
warning on my part, and potentially serious.

If you receive any messages similar in format to the one below my
signature, delete them immediately. [I have removed unsafe matter in the
sample] They are easy enough to recognise as they suggest you have
joined something, and give you a Confirmation Number, Login ID and
Temporary Password.  You are then told to follow a link to an IP
address.

Here is what a highly reliable contact of mine at Microsoft has said.

"The link takes you to a site using the MPACK toolkit to try to download
a range of malware based around the Win32 Storm Trojan."

"We are shutting them down as fast as we can but most of the sites are
in eastern europe".

You have been warned, so please delete any such messages immediately.

George Bell.

Sample message follows:-

-----Original Message-----
From: User [address deleted] On Behalf Of [Deleted]
Sent: Wednesday, August 22, 2007 6:50 AM
To: 
Subject: Membership Support [but Subject varies]

Welcome Member,

Welcome To Office Antics.

Confirmation Number: 74753533
Login ID: user8196
Temorary Password: in555

Please Change your login and change your Login Information.

Follow this link, or paste it in your browser: [Link to an IP address
deleted]

Enjoy,
Membership Support Department
Office Antics

** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq


http://www.bbc.co.uk/
This e-mail (and any attachments) is confidential and may contain personal 
views which are not the views of the BBC unless specifically stated.
If you have received it in error, please delete it from your system.
Do not use, copy or disclose the information in any way nor act in reliance on 
it and notify the sender immediately.
Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.
                                        
** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq

Other related posts: