New Sober Virus in the Wild-for SVT Team

Straight_Man

Message from MessageLabs, excerpted:

November 22, 2005 - 17:00 GMT/ 12:00 ET - MessageLabs has intercepted over
2.7-million copies of a new Sober virus, many of which are being spoofed to
appear as though they are sent from the FBI or the CIA. The first copy was
stopped at 19:00 GMT on 21st November. The size of the attack indicates
that this is a major offensive, certainly one of the largest in the last
few months.

Email Overview
These emails suggest to recipients that their Internet use has been
monitored by the FBI or CIA and that they have accessed illegal Web sites.
The email directs users to open the ZIP attachment containing the
executable, which once opened delivers the Sober virus payload. It then
spreads by searching the infected computer for other email addresses to
send copies of itself to, but ignoring any domains for certain security
organizations, including MessageLabs.

Details Here:

http://www.messagelabs.com/portal/server.pt/gateway/PTARGS_0_5885_476_319_-319_43/http%3B/0120-0176-CTC1/publishedcontent/publish/about_us_dotcom_en/news___events/press_releases/DA_139636.html

QCH

Thanks for the info... I passed the info on to my fellow IT members.

dragonV8

Thanks for the info and link John D.

Straight_Man

You folks are very welcome.