Well, you can't say that those that distribute viruses aren't a creative group. Through the years of me being an active user of the internet and computers in general, I have seen so many viruses; Trojans, worms, and just generally malicious programs circulate the internet. Although they are still quite easy to identify, at least for someone who spends a fair amount of time surfing the web, it seems that those who intentionally circulate these files, are getting a bit more creative with the way they try and get you to open the attachment to the email. I am using email as the example, as that is the most common way to spread the virus, as well as mask the sender. This morning while receiving my email from the server, mixed in with all the other spam, there was an email with the subject "Billing Notice from pocketbike.com". Well, being as I know the owner of Pocketbike.com personally, I thought it would be more than a bit odd that he would send me an email saying he was going to start billing me for the use of the email address. What I found more hilarious was that the email was from "Yee". Now what billing department would ever set there from display to say Yee? So, knowing that this was not a real billing notice, and that the attachment was merely a virus of some type, I couldn't resist checking out the message. I know it is not good to open the messages, so I used the tools built into many email clients that will allow you to view the message source without actually opening the email. This is where it started to get a bit funny. Viewing the message contents, I saw a warning message that said that I was being billed for my use of Pocketbike.com and that I should view the attached "Billing Notice" and send payment or my internet service would be cut off. This makes me wonder how many people would actually fall for this. I know there are quite a few people out there that know so very little about computers and the internet, other than the big button turns it on, and the big triangle connects them to AOL, so they can surf the web (if that's what you want to call AOL). I, of course, could not possibly fall for this one for the following reasons.
1. Pocketbike.com is not an Internet Service Provider (ISP), it is merely a web site devoted entirely to selling/riding these miniature racing motorcycles.
2. The From field display is a dead giveaway to be fake, since it supposedly from a billing department.
3. I know the owner personally.
I know, not everybody can know the owner personally, but I wonder how many people don't know what an ISP really is, and would open the attachment to see the bill, in fear of losing their connection to the internet. I am sure quite a few people have probably fallen for this one.
Although I found this one to be a bit funny, it does not compare to the creativeness of this next one, which has been circulating the net quite heavily in recent weeks.
Almost everybody that ever sends email has eventually gotten a delivery failure notice back from a server down the line, whether it is due to a typo in the email address, or perhaps the user's account no longer exists. While many of these are legitimate failure notifications, virus distributors have begun using this format of email to spread the virus. Since most people want to know what mail it was that was kicked back and why, they will read the message and try to figure out who, what, and why. I think this is a very creative way for these ruthless people to spread the harmful files. Here's a bit of advise in dealing with these emails, so that you can still see legitimate kickbacks, and yet not infect your computer and further spread the virus. The preview pane (available in most email clients) can be useful for these. It will allow you to see the body of the email without viewing the attachment. Since the virus is in the attachment, you will not be infected as long as you don't open the attachment. Most true failure notices don't attach a file. They give you a brief description of the email that failed to be delivered, the address or addresses in which it failed to be delivered, as well as a reason for failure. Most of the email body will contain server information, which is not really important, but there is generally a simplified message either near the top or the bottom describing what happened. The failure indications are always in the body of the email, not in the attachments. There are some servers that deliver failure notices with attachments, but the only ones I have ever seen with an attachment, the attachment is the original mail that is being returned. There is no reason to open that file anyway, you are the sender, and you know what it is already. This is very similar to the spread of viruses using a faked email address of [email protected] telling people to apply this security patch immediately to protect their computer. Believe me, Microsoft is not going to be sending out unsolicited support information. They don't want to do any more than they have to. All their security patches are set up on the Windows Update site, and the user must take it upon their self to update their machine.
I am sure there are many people that have been infected by this means of virus transportation, I hope people that read this will now know enough to avoid these emails, and hopefully help to at least slow down the spread of viruses.
Along the same thought lines as slowing down the spread of viruses, chain letters, while many find them fun to read and forward to their 5-10 (or entire address book) friends. Well, the chain letters are almost no better than viruses, although they don't infect your computer, if each person sends to their friends, and their friends send to their friends, the chain reaction does nothing more than spread garbage emails in mass, that clog up mail servers globally. Most of these chain letters are bogus anyway. There is no email tracking that will notify the original sender when the 1,000th person has signed this email. Applebees will not give you a gift certificate for sending the email to 5 friends (they would go out of business if they did). Bill Gates will not give you $1000 and free software for forwarding the email. Bill Gates is a rich man, he didn't get that way by giving away free stuff to anybody that can hit the Forward button in his or her email client. Before sending that "IMPORTANT, VIRUS ALERT, THIS IS NOT FAKE" virus warning, check it out, see if it really isn't fake. Before forwarding that "My name is Billy, and I need a new heart, but they won't give me a new heart until 5,000 people sign this email" email, chances are it is just another hoax created to proliferate through the net, Internet Cleanup Day has to be my all time favorite chain letter, clogging up mail servers along the way and annoying most of the people that have to filter through it as spam (which can be done with use of POPFile, the best email filtering program I have found yet), check to make sure it is a hoax before giving it new life. If we all team together, we can begin to eliminate this garbage, but if we keep it going, it will grow, and reappear in another 6 months as a slight variation, or even the same thing. Then it will return again next year, and the year after.
OK, I have gone on long enough, time for you to go install a spam filter, run a virus scan, and delete those pesky chain letters hoaxes from your inbox.
Recent Comments