CyberCrime & Doing Time: Anti-Virus Products Still Fail on Fresh Viruses
I saw this on Waxy’s Links today, and while I was just reading it just to keep abreast of the current virus attacks, I did stop when I saw this one.

(Hope it’s OK if I use your screen shot guys.)
Made got me is that I had received about 25 of these emails in my junk box every day last week. I know I didn’t sign up for email alerts, but I do have about 15 people who think they have my email address, so I assumed one of them had.
While I hadn’t click the link in the email, I did scan them to just see what sort of alerts my assumed subscriber had wanted to see.
They were all over the place, and I just figured that someone wanted that much bacn in their inbox and I let Mail.app continue to keep sending them to junk, where I would delete them in time.
You should read the link to know what you’re up against on the internet today, but the long and the short of the emails are that the links in the emails send you website that runs uses flash to put malware on your system. (I don’t remember clicking any links, but like the couple other virus I’ve gotten since I switched to the Mac, it would have just dumped the malware to the desktop, and OS X couldn’t execute it anyway.)
My guess is they even though you know you didn’t sign up for anything, like me, you’ll scan through them any way, and somewhere along the line you’ll come across a story that you’ll be just interested enough to click on.
Now the ones I got were CNN, but I just saw on Wil Wheaton’s blog that they are using MSNBC alerts as well.
I’m not one of those people sending around chain emails about how some new computer virus can infect your brain, but since this is one of the few that I’ve seen myself out in the wild, I just thought I’d give you all a heads up.
(Oh, and for Buddha’s sake… never, never, NEVER connect to ‘Free Public WiFi.’)
UPDATE:
So I after I posted this I came home, and found this in my junk box:

So I guess this is what the MSNBC version of the emails look like. Luckily it looks like Gmail is doing a good job of catching these before they even hit my inbox. Good on ya, gmail.
I thought I would also point out a tip. The main way phishing scams work is by sending you a link where the link text says one thing, but the link goes somewhere else. A quick way to check the link verses the link text in OS X Mail.app is to hover your mouse over the link. A tooltip will pop up and give you real url that the link points too. If it doesn’t match the text, or points to some site you’ve never heard of, then don’t click the link.
Now as far as I’ve seen Microsoft’s Outlook or Outlook Express don’t have these tooltips, nor does the url show up in the status bar. (In the browser the status bar at the bottom of the window will show the url of a link when you hover over a link.) Of course a good phishing filter like Microsoft’s or the one built into Firefox will check the link you are trying to open verses a list of know phishing sites and will alert you that you probably don’t want to go there.
In fact, if your in Windows just go ahead and get Firefox if you haven’t already. It will protect you against these scams and a whole lot more.
And of course, use a good dose of common sense goes a long way online. If you get a link from a site you don’t know, DON’T CLICK THE LINK.
Take it from the IT guy.
Recent Comments