Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Latest Storm Worm - Fake downloads for privacy software

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Virus, Worm &Trojan Alerts
View previous topic :: View next topic  
Author Message
harrywaldron
Junior Member


Joined: 24 Jul 2007
Last Visit: 09 Apr 2009
Posts: 43
Location: Roanoke, Virginia

PostPosted: Fri Sep 07, 2007 6:28 am    Post subject: Latest Storm Worm - Fake downloads for privacy software Reply with quote

The latest variant has been massively spammed and I'm personally received copies. It is designed to trick folks into thinking they are downloading TOR or other free privacy software (i.e., packages designed to communicate anonymously over the Internet). However, clicking on the malicious website link will have the opposite effect as infected PCs will give up privacy and start participating in a huge 1.7M botnet.

F-Secure: sTORm Worm
http://www.f-secure.com/weblog/archives/archive-092007.html#00001272

Quote:
A new round of storm worm attacks are playing on people's paranoia against being watched online. This time the lure leads users to a "TOR download" page, which is… surprise, surprise… fake.


Trend - Nuwar poses as TOR Proxy
http://blog.trendmicro.com/nuwar-poses-as-tor-proxy/

Trend: Nuwar.AQL Information
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FNUWAR%2EAQL&VSect=P

EMAIL EXAMPLE:

Code:
From: (REMOVED)
To: Harry
Subject: Your Privacy is being violated
Date:   Thu, 6 Sep 2007 16:31:45 +0200

Whenever you are downloading things, they are watching you. RIAA is going after everyone they can. They can't trace you if you use our new software. This software is made available free, so we can keep the internet free and private: (MALICIOUS URL REMOVED)
Back to top
View user's profile Send private message Visit poster's website
quietman7
Warrior Addict


Joined: 20 Dec 2004
Last Visit: 28 May 2014
Posts: 768
Location: Virginia, USA

PostPosted: Mon Sep 10, 2007 6:02 am    Post subject: Reply with quote

Quote:
Today we started seeing new Storm mails and the web pages changed layouts completely. Now the theme is National Football League (NFL)...

f-secure.com/weblog
_________________
Microsoft MVP - Consumer Security 2007-2014
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Back to top
View user's profile Send private message
Nightmaretony
Warrior


Joined: 15 Mar 2005
Last Visit: 30 Jun 2011
Posts: 256
Location: Meadowbrook

PostPosted: Mon Sep 10, 2007 6:30 am    Post subject: Reply with quote

Cant wait till these criminals are stopped. Sigh.
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred

Nightmare Park
Back to top
View user's profile Send private message Visit poster's website AIM Address
Nightmaretony
Warrior


Joined: 15 Mar 2005
Last Visit: 30 Jun 2011
Posts: 256
Location: Meadowbrook

PostPosted: Mon Sep 10, 2007 8:00 am    Post subject: Reply with quote

Suzi, can you delete out the redundants? Each time I posted, it would keep crashing the PHP so I thought it never posted, and I cannot delete my posts. Thanks! Just leave which is what I was trying to say there....
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred

Nightmare Park
Back to top
View user's profile Send private message Visit poster's website AIM Address
Nick
Site Admin


Joined: 27 Feb 2004
Last Visit: 21 Sep 2014
Posts: 3913
Location: California

PostPosted: Mon Sep 10, 2007 6:33 pm    Post subject: Reply with quote

Taken care of.
Back to top
View user's profile Send private message
Nightmaretony
Warrior


Joined: 15 Mar 2005
Last Visit: 30 Jun 2011
Posts: 256
Location: Meadowbrook

PostPosted: Mon Sep 10, 2007 9:08 pm    Post subject: Reply with quote

Thanks Nick! (website getting wierd lately....)
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred

Nightmare Park
Back to top
View user's profile Send private message Visit poster's website AIM Address
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Virus, Worm &Trojan Alerts All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group