Sunday, November 14, 2004

latest version of the MyDoom internet worm

Unlike its predecessors, the latest version of the MyDoom internet worm does not hide inside email attachments. Instead, it infects computers by tricking their users into clicking a website link located in the text of an email. Once the user clicks the link, he/she is sent to a website that immediately injects MyDoom into the computer by means of a newly discovered hole in Microsoft’s Internet Explorer browser.

Some of these malicious emails appear to come from legitimate websites. The most common example of this is an email claiming to be from PayPal, which is the online payment system associated with eBay. The text of the email typically says:

"Congratulations! PayPal has successfully charged $175 to your credit card. Your order tracking number is A866DEC0, and your item will be shipped within three business days. To see details please click this link."

Another type of sinister email contains the following text:

"Hi! I am looking for new friends. My name is Jane, I am from Miami, FL. See my homepage with my weblog and last webcam photos! See you!"

To prevent infection, ignore all email links sent to you via email. If you are uncertain as to whether or not a particular company needs to speak with you concerning a legitimate business matter, then simply telephone the company or visit its central website to access your account safely and securely.

As a reminder, the best way to ensure the privacy of the files, credit card numbers, financial statements, and other sensitive data stored on your computer is to patch the holes in Windows, use a trusted antivirus program, and use a software or hardware firewall

No comments: