Wurmnews 06.03.04

[ThaWild 10]

A competition between computer-virus writers is responsible for more than a dozen recent variants of the Mydoom, Netsky and Bagle viruses in the past week. That includes the most recent, W32/Bagle.j@MM, another Medium Risk mass-mailing worm with characteristics similar to its predecessors—including a potentially dangerous backdoor component.

Up-to-date McAfee VirusScan users with dat 4332 are protected from this threat.

Learn More about W32/Bagle.j@MM

Scan for W32/Bagle.j@MM

Caution: An infected email can come from addresses you recognize.

What to look for:

 

From: Varies. Address may be forged.

 

Subject: Varies. Examples—

 

- E-mail account security warning.

- Notify about using the e-mail account.

- Warning about your e-mail account.

 

Body: Varies. Example—

 

Dear user of "(user's domain inserted*)" mailing system,

 

Your e-mail account will be disabled because of improper using in next three days, if you are still wishing to use it, please, resign your account information.

 

For details see the attached file.

 

For security purposes the attached file is password protected. Password is "(5 random numbers inserted)".

 

The Management,

The (user's domain inserted*) team

http://www.(user's domain inserted*).com

 

* Where the user's domain is chosen from the To: address. For example the user's domain for user@mail.com would be "mail.com".

 

Attachment: File may be .EXE .PIF or .ZIP

 

http://www.mcafee.com

 

Greez