New worm fakes mail admin messages

We've seen a lot of cheesy fake messages produced by viruses trying to entice users to click on their attached executables, but this one has to be producing the most heartburn for domain and website owners. The worm Symantec calls W32.Beagle.J@mm uses a series of random message lines and a variable to produce a fake message apparently from an official source. Check out the message the guys over at Shacknews received.

Update: I just received our own custom version of the message:

Hello user of e-mail server,

We warn you about some attacks on your e-mail account. Your computer may contain viruses, in order to keep your computer and e-mail account safe, please, follow the instructions.

Advanced details can be found in attached file.

In order to read the attach you have to use the following password: 47333.

The team

Yikes. I can see the lawsuits now. If you receive a message like this from one of your favorite sites or from your own domain, don't be fooled, or everybody will laugh at you.
Tip: You can use the A/Z keys to walk threads.
View options

This discussion is now closed.