Blogs Latest Source of PC Infection

Blogs Latest Source of PC Infection

Blogs are free and simple to use, offer users lots of storage space, can be used anonymously and most do not scan stored files for viruses and other malicious programs

Users were urged to keep anti-virus and patches up to date, regularly scan machines with anti-spyware products and exercise caution when reading unsolicited messages sent via e-mail or instant messenger.


The BBC has a story which indicates that filtering firm Websense believes at least 200 fake blogs are in existence which have malicious code that could infect your pc. Websense said it had seen examples of some computer criminals creating a legitimate looking weblog, loading it with keylogging software or viral code, and then sending out the address of it through instant messenger or spam e-mail. Websense warned that viruses hosted on weblogs might be a danger because they get round the filtering systems many firms have created to ensure malicious programs do not reach employees." From the article: "In separate cases some blogs were being used as storage lockers holding chunks of malicious code that the controller of a network of zombie machines wants those remotely-controlled computers to use

http://news.bbc.co.uk/2/hi/technology/4441333.stm

NEW “MYTOB” E-MAIL WORM SPREADS RAPIDLY

NEW “MYTOB” E-MAIL WORM SPREADS RAPIDLY

Problem: Numerous variants of a new Internet worm are spreading rapidly via e-mail attachments.
March 31, 2005
Over the past month, at least 12 versions of a new computer worm dubbed “Mytob” have propagated over the Internet. Lurking inside files attached to e-mails, Mytob targets computers running the Windows operating system. Once the infected attachment has been opened or run, the worm proceeds to block the computer from accessing security updates or patches from websites belonging to Microsoft, Symantec, McAfee, or other providers of computer protection. In addition, it opens a backdoor to allow intruders to enter the system, and it generates copies of itself and distributes them to all e-mail addresses found on the infected computer.

Many e-mails containing Mytob have the following subject lines:
• Good day
• Hello
• Mail Delivery System
• Mail Transaction Failed • Server Report
• Status
• Error

Often the text inside the e-mail reads:
• Here are your banks documents.
• The original message was included as an attachments.
• The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment. • The message contains Unicode characters and has been sent as a binary attachment.
• Mail transaction failed. Partial message is available.

Generally, Mytob hides inside an e-mail attachment with a name like:
• body
• data
• document
• doc
• file • text
• test
• message
• readme

With one of the following extensions:
• .bat
• .cmd
• .exe • .pif
• .scr
• .zip

Or it may have a second file extension such as:
• .doc
• .txt • .htm
• .tmp


Do not open or run any attachments sent to you in an instant message or e-mail unless you are expecting to receive the attachments and unless you are 100% positive they are safe. If you are uncertain whether or not a friend or loved one intentionally sent you an attachment, simply call him/her or send an e-mail inquiry. The possibility exists that his/her computer is infected with a virus or worm that has sent copies of itself to each e-mail address found on the computer.

The best way to ensure the privacy of the files, credit card numbers, financial statements, and other sensitive data stored on your computer is to patch the holes in Windows by visiting the Windows Update website; use a trusted antivirus program and download the latest antivirus definitions; and use a software and/or hardware firewall to make your computer “invisible” to hackers while you use the Internet.