0 Replies Latest reply on Mar 3, 2008 9:04 AM by HarryWaldron

    Storm Worm - Reactivating with e-cards and postcards as bait

      Folks should continue to delete any of these humorous e-cards without visiting the malicious website. Most likely it'll take a day or two for AV vendors to fully protect against these new attacks.

      Storm Worm - Reactivating with e-cards and postcards as bait
      http://www.f-secure.com/weblog/archives/00001392.html
      http://isc.sans.org/diary.html?storyid=4054

      QUOTE: We haven't seen new Storm sites since the spam run they did over Valentine's Day… until early this morning. Right now they are sending a wide variety of humorous e-cards and postcards ...

      EXAMPLES OF EMAIL MESSAGES TO AVOID

      Subject Line
      -----------------------
      Your ecard joke is waiting
      You have an ecard
      We have a ecard surprise
      Someone Just sent you an ecard
      Did you open your ecard yet
      ecard waiting for you
      Open your ecard
      new ecard waiting
      Now this is funny
      online greeting waiting
      sent you an ecard

      Body
      -----------------------
      laughing Funny Card
      You have been sent a Funny Postcard
      You have been sent the Funny Ecard
      original Funny Card
      Someone Sent you this Funny Ecard
      your funny postcard
      original Funny Postcard
      sent a Funny Postcard
      personal funny postcard
      FunnyPostcard
      laughing funny postcard