posted
I received this from my security people and decided to pass it on.
W32/Mimail.s@MM is a Medium Risk mass-mailing worm that tries to steal credit card information by displaying a fake Microsoft Windows license expiration message. Stolen credit numbers are sent to addresses within the domains @mail15.com and @ziplip.com.
W32/Mimail.s@MM also forwards itself to contacts it steals from the infected machine.
Caution: Watch out for emails with "here is the file you asked for" in the subject line or body. They may contain an attachment with the W32/Mimail.s@MM worm.
What to look for:
From: An infected email can come from people you know. Subject: here is the file you asked for Body: Hi! Here is the file you asked for! Attachment: example--document.txt.scr possible file extensions used: .pif, .scr, .exe, .jpg.scr, .jpg.pif, .jpg.exe, .gif.exe, .gif.pif, .gif.scr Aliases: W32.Mimail.R@mm
-------------------- Alma Gates Posts: 3121 | From: phoenix, arizona - usa | Registered: Aug 1999
| IP: Logged |
Printer-friendly view of this topic