* subscribe at http://techPolice.com

Tricky new virus spreads quickly

Sircam arrives in unpredictable ways, can expose private info

By Bob Sullivan MSNBC

July 19 � Anti-virus companies have raised their risk rating on a new computer virus 
making the rounds called �Sircam.� The virus is particularly troublesome because it 
arrives with random subject lines and attachment names, meaning there�s no easy way to 
warn computer users. The bug also has a nasty payload � it can expose private 
corporate information. The number of infections around the world has risen sharply 
during the day Thursday, leading anti-virus firms to raise the warning flag.

        AMONG THE ENTICING subject lines �Sircam� arrives with are: �Partnership 
Agreement,� �Home Depot Requisition Letter,� �MAC Umbrella,� �tips,� and �Family 
Treatment.�

       �The virus comes in different flavors,� said Vincent Gullatto, spokesperson for 
Network Solutions Inc. �That�s possibly why people are getting infected. It�s 
difficult for them to understand what�s a good message and what�s not. In this case, 
the only way to be protected is by updating their anti-virus software.�

       Most companies had given Sircam a medium risk rating Wednesday, as it did not 
initially appear to be spreading quickly. But officials at Network Associates and 
Symantec Corp. both say instances of infection �continue to increase significantly.� 
Gullatto said his firm is still undecided about raising the risk rating but figures 
Sircam might earn its highest warning level by the end of the day. Symantec has 
already raised the bug from a 3 to a 4 on a scale of 1 to 5.

         Gullatto compared the virus� infection rate to bugs like Hybris and Magistr, 
which have shown a slow but steady infection rate over a number of weeks. That 
contrasts with big-name bug outbreaks like Melissa or the Kournikova virus, which 
spread worldwide very quickly, but then saw infection rates drop off dramatically 
after the first 24 hours

     Upon infection, Sircam creates a list of files with extensions such as .DOC, .ZIP 
and .JPG that are located in the victim�s �My Documents� folder. The virus then sends 
copies of itself to users in the victim�s address book, including
one of those files chosen at random.

       �It means that the worm can send out confidential information,� according to a 
statement on F-Secure Corp.�s Web site.

       The body of the message can also differ � but a typical Sircam-infected message 
says something similar to:

       �Hi! How are you?

        I send you this file in order to have your advice

        See you later! Thanks.�






============================================================
Half.com is the Smartest Place to Buy & Sell your CDs, DVDs
Books, & Games! Get killer deals on over 10 million items
priced up to 50-90% off.  Plus get $5 off your 1st purchase.
http://click.topica.com/caaacuMb1dhr0b2EDp2f/half
============================================================

--via http://techPolice.com
archive: http://theMezz.com/cybercrime/archive
subscribe: [EMAIL PROTECTED]
--via http://theMezz.com

==^================================================================
EASY UNSUBSCRIBE click here: http://topica.com/u/?b1dhr0.b2EDp2
Or send an email To: [EMAIL PROTECTED]
This email was sent to: [email protected]

T O P I C A -- Register now to manage your mail!
http://www.topica.com/partner/tag02/register
==^================================================================

Reply via email to