NOW READ THIS
("Security Advisory")

Go Back

---

Submitted by: Bill Hickey
NCVA List Master

NRT-0116 Worm Spreads Disguised as Security Warning:

Security experts warn that a worm named "Win32-dot-Warezov-dot-ms" is spreading via spammed emails, disguised as system-generated security warnings from the email service provider. The email uses social engineering to convince recipients the email is from the "Customer Support Center Robot," encouraging them to download an .exe file that appears to be a legitimate Windows patch. This variant of the Warezov worm, also known as Stration, is a Trojan downloader, which brings malicious files into the compromised computer by contacting various web sites via HTTP. Coming with its own SMTP engine, the Trojan harvests email addresses from the victim's address book and sends its copy to them.

(net-security.org 10APR07)

Last Modified: Saturday, 14-Apr-2007 09:12:25 EDT