There are worms to fake Microsoft patches again
Security firm Sophos has warned of the emergence of a new Stration worm computer variant in the form of fake Microsoft security updates.
Sophos's latest report confirms that the Depatio-AN worm variant is spreading at a very fast pace.
' The deep variant Stratio-AN has been strongly dispersed since the early morning on Monday. The main distribution of the Stration worm variant is still email, but in many different forms of spoofing. Among them is a fake email that warns users that their system has been infected with a computer worm and is continuously sending emails containing computer worms. Email recommends that users should quickly install the attached 'KB7859-x86.zip' update. But in fact 'KB7859-x86.zip update' is actually the Stration-AN worm variant . "
Sophos said that the risk of users being infected with new Stration worm is relatively high because the worm uses attack methods to address users' concerns about security issues, especially security errors. The password has not been fixed in Microsoft products.
' A lot of users are now anxiously waiting for Microsoft's VML patch update while malicious code is likely to attack this security flaw, ' Sophos said. ' It seems that the people behind the worm variant Stratio-AN have sniffed this user's concern and used it as a means to spread this worm .'
Graham Cluley - Sophos' senior technology consultant - confirms that emails contain new variants of the Stration worm that have strongly attacked email gateway servers to target any PC system. that it can. Users who just need to neglect a bit can get the new worm.
Cluley recommends that users should not open unsolicited emails and regularly update security applications on the system. Users should also not download and install any patches from unofficial websites. Otherwise they will face the risk of being attacked.
' A legitimate software company never sends you email notifications about new security updates, but often users have to go to their own websites to find security updates .'
Hoang Dung
You should read it
- New variant Gozi Trojan raged again
- The new worm attacks Yahoo Messenger users
- Storm worm 're-exported' through a joke
- Will the Kama Sutra worm come back next week?
- 50% of viruses only last for 24 hours
- The most exclusive Yahoo Messenger worm ever
- Appeared worm computer attack AMD processor chip
- Conficker.e started to implement 'money-making mission'
May be interested
- Kaspersky warned about Warezov virus outbreaksecurity firm kaspersky lab has warned about the emergence of warezov virus, which is spreading strongly via email. kaspersky lab said the win32.warezov.at worm uses its own smtp engine to send copies to email addresses that it declares.
- Add a virus spread through Yahoo! IMafternoon 1-8, a virus named vloveym has spread to a series of computers in vietnam. according to the analysis of the network security center (bkav), this virus appeared on july 28. just like the previous gaixinh (xrobot) and ymheart viruses, vloveym is mainly in
- How to kill Vlove virusthe vietnamese internet community is witnessing a new 'flood' from the internal virus called vlove, spread through the most popular yahoo messenger instant messaging service today. virus sends im to the entire list frien
- 'Suicide' virus - New threat on the Internetthe 'suicide' virus - a virus capable of destroying all signs of its own existence after completing the task - is now becoming a new threat on the internet.
- Discover new mobile phone wormssecurity firm f-secure has discovered a new worm capable of attacking mobile phones in a very dangerous way. similar to the previous 'colleagues', the new worm version commwarrior.q infects the phone via a non-connection
- 185,000 computers were infected with Rontokbro virus in Julyin july, continuing to top the list of the most contagious viruses in the month, 'rontokbro' became a name that must be noted 'reluctantly' by users in vietnam.