Hi;
I thought this could be of interest, in case you don't get the warnings
from Sophos.

Regards,
Kami


-----Original Message-----
From: Sophos Alert System [mailto:emergency-return@;lists.sophos.com] 
Sent: Friday, October 25, 2002 6:04 AM
To: [EMAIL PROTECTED]
Subject: Sophos advises on unwanted "E-cards" filling email inboxes



SOPHOS ADVISES ON UNWANTED "E-CARDS" FILLING EMAIL INBOXES
It's not a virus, it's not a worm.. but it could be considered a
nuisance


Sophos technical support has received a significant number of calls from
customers concerned about a widespread email which invites users to pick
up an "E-Card" from a website called FriendGreetings.com.

If users follow the link in the email, they are invited to install an
ActiveX control onto their computer. An end-user license agreement
(EULA) is displayed stating that by installing the application the user
is giving permission to send a similar greeting card to all addresses
found in the user's Outlook address book.

Of course, many users will not read the EULA thoroughly and will simply
give permission for the ActiveX control to be installed, thus allowing
many unwanted emails to be sent.

The emails arrive with the following characteristics:


Subject:

   <Recipient name> you have an E-Card from <Sender name>

Body:

   Greetings!

   <Sender name> has sent you an E-Card - a virtual postcard from
   FriendGreetings.com. You can pick up your E-Card at the
   FriendGreetings.com by clicking on the link below.

   <A url at www.friendgreetings.com is then displayed>

   Message:
   ----------------------------------------------------------
   <Recipient name>
   I sent you a greeting card. Please pick it up.
   <Sender name>
   ----------------------------------------------------------


It should be noted that this is not a virus or a worm, and that the
email has no attachment.

Customers with web proxies who are concerned about users forwarding
unwanted emails may like to consider blocking access to
www.friendgreetings.com. The website is run by a Panamanian company
called Permission Media, Inc. Companies who receive unwanted email as
described above may wish to complain directly to Permission Media.

MailMonitor for SMTP users can block the emails at their gateway by
using the blocked subject lines option. Details on how to do this can be
found at http://www.sophos.com/virusinfo/articles/greetings.html

Sophos recommends companies consider blocking access to non-work-related
websites, and educate users to check with their IT department before
installing unauthorised code onto their computers.

More information can be found on the Sophos website at
http://www.sophos.com/virusinfo/articles/greetings.html





---------------------------------------------------------------------
To unsubscribe, email: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to