*Fake F-Secure e-mail contains malware*
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

*Fake F-Secure e-mail contains malware*

From: Jeff B <jbeard_No-SpAm_1185@adelphia.net>
Date: Fri Feb 03 2006 - 18:18:45 CET

be advised!

FEBRUARY 02, 2006 (COMPUTERWORLD) - A Trojan horse has been sent to
e-mail addresses disguised as a message from antivirus software vendor
F-Secure Corp. in Helsinki, Finland, the company said in a statement.

F-Secure said that an unknown attacker sent out thousands of infected
e-mails crafted so that they appear to be from a nonexistent F-Secure
employee, “David Adams, Dept. Research, F-Secure Development.”

The addresses used in the attack include press@f-secure.com,
info@f-secure.com and editor@f-secure.com, F-Secure said. The e-mails
were not sent from the company’s network but were spoofed to look like
they were coming from an F-Secure address, the company said.

The e-mails contain a new variant of the Breplibot worm, which F-Secure
Anti-Virus detects as W32/Breplibot.ae.

F-Secure said it has taken measures to inform network users about the
attack.

According to F-Secure, the e-mails look like this:

From: Mr D Adams < david.adams @ f-secure.com >

Subject: Website Browsing Problem

Hello,

I noticed whilst browsing your site that there were problems with some
of your links, ....

-- 
---
Jeff B (remove the No-Spam to reply)
Received on Tue Feb 7 20:59:00 2006