Re: Email from Microsoft is it a fraud

From: Phil Weldon (pweldon_at_mindspring.com)
Date: 09/26/03


Date: Fri, 26 Sep 2003 20:52:49 GMT


"nadine" <info@iptar.org> wrote in message
news:1cad01c38395$85fb4ab0$a001280a@phx.gbl...
> Just received an email from microsoft, with an attachment
> with instructions to download. This is a scam, fraud, etc.
> Please confirm.

SWEN NEWS

Digest of 'swen' / Worm.Automat.AHB news, 25SEP03

Vietnam

Ha Noi, Sept. 24 (VNA) -- Computer virus W32. Swen. A has afflicted more
than 100 PCs in Viet Nam since it proliferated in the country on Saturday,
Director of the Back Khoa Internetwork Security Centre (BKIS) Nguyen Tu
Quang said on Tuesday.

Asia

      The dominance of Microsoft in personal computer software leaves
critical networks vulnerable to attacks from viruses and hackers, says a
report by security experts.

      The report, released by a trade group backed by rivals of Microsoft,
highlights longstanding concerns about the national security risks posed by
the company's near-monopoly in personal computers.

                              Channelnewsasia.com

Asia

      Swen virus could infect millions more computers: expert

      The Swen computer virus has infected at least 200,000 computers
worldwide and could spread to millions more on Monday when office workers
return to their desks after the weekend, says an expert.

                               Channelnewsasia.com

USA

Spread via e-mail, the "Swen" worm appears to do little damage, but experts
say the unknown author's painstaking attempt to make it look like a real
security bulletin from Microsoft shows a level of trickery new to Internet
virus and worm attacks.

"This is a level of creativity we've not seen before," said Tony Magallanez,
a San Jose, Calif.-based systems engineer for F-Secure, a Finnish anti-virus
company. "This is a very authentic looking message that definitely uses some
sophisticated social engineering tactics."

                                Biznews.com

South Africa

Quick action taken by TelkomInternet has saved its users from a major virus
onslaught, after a new virus -- W32.Swen.A -- appeared last Thursday and
started ramping up even faster than the sobig.f and blaster worms, the
telecommunications group disclosed on Tuesday.

The W32.Swen.A virus is a variant of Worm.Gibe.F, and is blocked by the
TelkomInternet scanner that thwarted more than 5 000 instances on Sunday
alone. The virus masquerades as a Microsoft security patch, sets up a mail
server on the recipient's system, asks for the email account details and
password, and then starts to spam the world.

The load caused by this virus has trebled the number of incoming mail
connections to the TelkomInternet servers, causing mail delivery to slow
down.

                                                          Mail & Guardian,
Johannesburg

Ireland

The Irish Times reports that thousands of Indigo.ie e-mail account holders
experienced lengthy delays to their e-mail services Tuesday following the
spread of a computer worm called Swen. The worm, which by Tuesday night had
infected 1.5 million computers worldwide, is disguised as a legitimate
e-mail from Microsoft promising a software patch. But the e-mail
automatically executes an attachment that infects a computer users' machine
and also tries to steal e-mail account data.

                                                 Electricnews.net

USA

Another Worm Is Crawling Cyberspace

SEATTLE - If you have been noticing some new irritating e-mail in your inbox
today, you're not alone. Yet another new worm is crawling around the
Internet.

Kokomo1000 News

You can get an expansion on these clips either at he credited location or at
the Google News Service (Beta)



Relevant Pages

  • ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.05.05
    ... I'm getting an LSASS error message, and/or I have the Sasser virus. ... Microsoft generally releases security patches on the second Tuesday of more ... I just heard about a new Microsoft security patch update. ... www.grisoft.com is free antivirus, ...
    (microsoft.public.scripting.virus.discussion)
  • Re: << SBS News of the week Nov 29 2004>>
    ... > How to help protect against a WINS security issue: ... > allow a virus to spread through Microsoft Windows ... > worm, which have begun to spread rapidly by email. ...
    (microsoft.public.backoffice.smallbiz2000)
  • ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.05.03
    ... I'm getting an LSASS error message, and/or I have the Sasser virus. ... Microsoft generally releases security patches on the second Tuesday of more ... I just heard about a new Microsoft security patch update. ... www.grisoft.com is free antivirus, ...
    (microsoft.public.security)
  • Re: << SBS News of the week Nov 29 2004>>
    ... > How to help protect against a WINS security issue: ... > allow a virus to spread through Microsoft Windows ... > worm, which have begun to spread rapidly by email. ...
    (microsoft.public.windows.server.sbs)
  • ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.05.05
    ... I'm getting an LSASS error message, and/or I have the Sasser virus. ... Microsoft generally releases security patches on the second Tuesday of more ... I just heard about a new Microsoft security patch update. ... www.grisoft.com is free antivirus, ...
    (microsoft.public.security)