Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Sober.J - New variant for the watchlist


  • Please log in to reply
No replies to this topic

#1 harrywaldron

harrywaldron

    Security Reporter


  • Members
  • 509 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Roanoke, Virginia
  • Local time:06:49 PM

Posted 31 January 2005 - 06:54 AM

Almost every variant of the Sober worm has went medium, so we should watch developments carefully, as it's a highly advanced virus. The social engineering approach used here could cause this virus to spread.

Sober.J - New variant for the watchlist
http://secunia.com/virus_information/15006/sober-j/
http://www.f-secure.com/v-descs/sober_j.shtml
http://www.trendmicro.com/vinfo/virusencyc...ORM%5FSOBER%2EJ
http://www.sophos.com/virusinfo/analyses/w32soberj.html

FORMAT OF INFECTED EMAIL MESSAGES

Subject: I've got YOUR email on my account!!

Body: Hello, First, Sorry for my very bad English! Someone send your private mails on my email account! I think it's an Mail-Provider or SMTP error. Normally, I delete such emails immediately, but in the mail-text is a name & adress. I think it's your name and adress. The sender of this mails is in the text file, too. In the last 8 days i've got 7 mails in my mail-box, but the recipient are you, not me. lol OK, I've copied all email text in the Windows Text-Editor and i've zipped the text file with WinZip.

Attachment: [/color]email_text.zip[/color]

BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users