Experts at Sophos have warned users that a new variant of the Sober worm is spreading in the wild. The worm is currently the fifth most commonly encountered virus in the last 24 hours, being beaten only by variants of the prevalent Netsky and Zafi worms.
The W32/Sober-M worm bulk mails itself in either German or English language, depending on whether it believes the recipient's email address to be owned by a German or English speaker.
Email sent in English have the following characteristics:
Subject line: I've_got your EMail on my_account!
Attached file: your_text.zip
Message text:
Hello,
First, Very Sorry for my bad English.
Someone is sending your private e-mails on my address.
It's probably an e-mail provider error!
At time, I've got over 10 mails on my account, but the recipient are you. I have copied all the mail text in the windows text-editor for you & zipped then.
Make sure, that this mails don't come in my mail-box again.
bye
Graham Cluley, senior technology consultant at Sophos said,
"This latest variant of the Sober worm may catch out the unwary as they open their email inbox. It looks like the virus writer is deliberately using 'broken english' to lull people into a false sense of security that it's not a virus that has sent the message through, but an aggrieved email user. The virus plays on people's desire to be a good net citizen - anyone who receives a message like this may feel duty bound to open the attachment and investigate how their computer has been sending erroneous email, but such good intentions could result in a nasty infection."
As ever, we recommend you keep your anti-virus software up to date.
|
|
Reader Comments: 0
