| View previous topic :: View next topic |
| Author |
Message |
harrywaldron
Junior Member
Joined: 24 Jul 2007
Last Visit: 09 Apr 2009
Posts: 43
Location: Roanoke, Virginia
|
 Posted: Fri Sep 07, 2007 6:28 am Post subject: Latest Storm Worm - Fake downloads for privacy software |
 |
|
The latest variant has been massively spammed and I'm personally received copies. It is designed to trick folks into thinking they are downloading TOR or other free privacy software (i.e., packages designed to communicate anonymously over the Internet). However, clicking on the malicious website link will have the opposite effect as infected PCs will give up privacy and start participating in a huge 1.7M botnet.
F-Secure: sTORm Worm
http://www.f-secure.com/weblog/archives/archive-092007.html#00001272
| Quote: |
| A new round of storm worm attacks are playing on people's paranoia against being watched online. This time the lure leads users to a "TOR download" page, which is… surprise, surprise… fake. |
Trend - Nuwar poses as TOR Proxy
http://blog.trendmicro.com/nuwar-poses-as-tor-proxy/
Trend: Nuwar.AQL Information
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FNUWAR%2EAQL&VSect=P
EMAIL EXAMPLE:
| Code: |
From: (REMOVED)
To: Harry
Subject: Your Privacy is being violated
Date: Thu, 6 Sep 2007 16:31:45 +0200
Whenever you are downloading things, they are watching you. RIAA is going after everyone they can. They can't trace you if you use our new software. This software is made available free, so we can keep the internet free and private: (MALICIOUS URL REMOVED) |
|
|
| Back to top |
|
 |
quietman7
Warrior Addict
Joined: 20 Dec 2004
Last Visit: 28 Mar 2012
Posts: 768
Location: Virginia, USA
|
| Posted: Mon Sep 10, 2007 6:02 am Post subject: |
|
|
| Quote: |
| Today we started seeing new Storm mails and the web pages changed layouts completely. Now the theme is National Football League (NFL)... |
f-secure.com/weblog
_________________
Microsoft MVP - Consumer Security 2007-2012 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators |
|
| Back to top |
|
|
Nightmaretony
Warrior
Joined: 15 Mar 2005
Last Visit: 30 Jun 2011
Posts: 256
Location: Meadowbrook
|
| Posted: Mon Sep 10, 2007 6:30 am Post subject: |
|
|
Cant wait till these criminals are stopped. Sigh.
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred
Nightmare Park |
|
| Back to top |
|
|
Nightmaretony
Warrior
Joined: 15 Mar 2005
Last Visit: 30 Jun 2011
Posts: 256
Location: Meadowbrook
|
| Posted: Mon Sep 10, 2007 8:00 am Post subject: |
|
|
Suzi, can you delete out the redundants? Each time I posted, it would keep crashing the PHP so I thought it never posted, and I cannot delete my posts. Thanks! Just leave which is what I was trying to say there....
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred
Nightmare Park |
|
| Back to top |
|
|
Nick
Site Admin
Joined: 27 Feb 2004
Last Visit: 28 Aug 2012
Posts: 3913
Location: California
|
|
| Back to top |
|
|
Nightmaretony
Warrior
Joined: 15 Mar 2005
Last Visit: 30 Jun 2011
Posts: 256
Location: Meadowbrook
|
| Posted: Mon Sep 10, 2007 9:08 pm Post subject: |
|
|
Thanks Nick! (website getting wierd lately....)
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred
Nightmare Park |
|
| Back to top |
|
|
|
