Advertisement
Promo

Security threats Toolkit

Sober worm impersonates high-tech cops

Tom Espiner ZDNet.co.uk

Published: 29 Nov 2005 13:40 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The National Hi-Tech Crime Unit (NHTCU) has warned computer users not to fall victim to the latest Sober worm attack, which is now spreading via an email that pretends to come from the cybercrime-fighting police unit.

The email tells recipients that their Internet use has been monitored and that they have accessed illegal Web sites. The email then directs recipients to open an attachment and answer questions, but this attachment is actually the Sober virus.

The NHTCU advised users to delete unsolicited email.

"If you receive email from someone you don't know you should delete it. Never click on a link, and update your antivirus software regularly," said an NHTCU spokesperson on Tuesday.

Emails from info@nhtcu.org and office@nhtcu.org should be deleted immediately, the NHTCU said. The mass-mailing worm is transmitted in an email with the subject line of "You visit illegal Web sites" or "Your IP was logged". Once downloaded, it mails itself to all of the addresses in the users' address book, and turns off antivirus software.

This latest Sober outbreak broke out last week, with very similar emails pretending to come from the FBI, or claiming to contain video clips of hotel heiress Paris Hilton.

and experts have warned that it is likely to worsen this week as US users return to work and switch on computers after the Thanksgiving break.

IT managers who feel their employees could be at risk should direct them to GetSafeOnline, the information service offered by the NHTCU, the spokesperson said.

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
63 out of 128 people found this useful


Full Talkback thread

0 comments


Company/Topic Alerts

Create a new alert from the list below:





Video icon

Video

Sentry Posts Blog

Civil liberties groups attack file-sha...

Civil liberties and digital rights organisations have strongly criticised Lord Mandelson's Digital Economy Bill. Liberty said in a position paper on Tuesday that the bill, part of... More

Post a comment

Authentication risks all too human

Risks to successful online banking identification and authentication using smartcards involve a mixture of human and technological factors, according to the European Network and Information... More

1 comment

Opera censors Chinese content

Opera has updated the Chinese version of its mobile browser to stop users accessing restricted content. Opera Mini was updated on Friday from an international to a Chinese version,... More

2 comments


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters