Tuesday, 3 July 2007

ecard update and new trojan

First of all, an update to the last alert of greetings 2000 e-card scam, there are several variations popping up, if you receive an e-card notification it should say the company that hosts it (eg yahoo ecards) and the senders name ( not just mate, mom, dad etc)

Unless very specific to you there is no doubt its a scam to infect your machine, if you think it may be genuine, email the sender directly to confirm if they have sent a card..

Although i advise NOT to use windows updates, an email scam has recently been released claiming to be a Microsoft update.

"The spam, which touts ‘Microsoft Security Bulletin MS07-0065 - Critical Update’ as its subject and appears to come from ‘update@microsoft.com’, claims users should download a June 18 security patch and provides a link to a URL that looks legit.

"A new 0-day vulnerability has appeared in the wild," the message reads. "The vulnerability affects machines running Microsoft Outlook and allows an attacker to take full control of the vulnerable computer if the exploitation process is succesfull [sic]." It goes on to boast that 100,000 PCs have been hijacked so far by unnamed malware exploiting the bug. "

Do not follow the link as it will install a trojan on your machine. if you google "Microsoft Security Bulletin MS07-0065 " you will get more information.

Its ironic that since setting up this free alert system i have come across more scams in the last week then the last several months.

Again, please forward to your friends and tell the to subscribe as its free just by emailing subscribe@9cc.co.uk

e card scam

A Genuine Virus scam to be aware of!!!



This alert is for a convincing scary way of trashing your PC

I received this today so in order to keep you all protected, rather than waiting until monday for the monthly alert, i've brought it forward a couple of days

This is probably one of the easiest scams to fall for that i have come across as there are no attachments involved or forged website links.

Further below is a copy of the email that came through, and immediately below is the way i identified it as a scam

How to detect its a fraud;

  1. Ambiguity – Notice how it says “Your mate” has sent you a card, rather than your name, this is a good guide but bear in mind they could send millions out with common names like john, jane, phil, helen etc etc.

  2. A lack of a worded web address, its an ip address so making it not as easy to spot. (it should be www.2000greetings.com/card etc or similar, not just numbers)

  3. If you click on the link http://69.205.167./?434671c16a2e59b1283bd, it downloads a virus onto your system, your virus checker should catch it but its better not to do it in the first place.

  4. If you click on the shorter link it gives another ambiguous clue that the web browser is under testing and to click the link, again this will download the virus.

  5. The final clue is its signed mailer Daemon and not from one of your friends.



To be sure i was right and not send out false alerts i followed it through and confirmed that it did infect my system and it succeeded in crashing my web browser which took a while to fix. (aren't you glad i do this so you don't have to!!


Below is the one i got ( i think 2000Greetings.Com is a genuine site but this email is not from them)

By Right clicking on the email header title and choosing Properties it shows the r Return-Path: <nacor@dooleymack.com>, not 2000Greetings.Com which you would expect if genuine.

********************************************************************************************


Below is the actual wording of the email which has the subject line of “You've received an ecard from a mate

Your mate has sent you an ecard from 2000Greetings.Com.

Send free ecards from 2000Greetings.Com with your choice of colors, words and music.

Your ecard will be available with us for the next 30 days. If you wish to keep

the ecard longer, you may save it on your computer or take a print.

To view your ecard, choose from any of the following options:

--------

OPTION 1

--------


Click on the following Internet address or copy & paste it into your browser's address box.

http://69.205.167.9/?434671c16a2e59b1283b

--------

OPTION 2-------

copy & paste the ecard number in the "View Your Card" box at

http://69.205.167.2


Your ecard number is

434671c16a2e59b1283bd


Best wishes,

Mailer-Daemon,

2000Greetings.Com

*********************************************************************


If you get this one or ones in a similar vague vain, delete them, no harm will be done to your pc by reading them as long as you don't click on the links.

In regards to safety, i have deleted the last couple of numbers in the links above so you can't click them and get infected.


Remember that this service is free to all, the uptake so far is still disappointingly low, for it to be more effective in stopping crap like this greeting email virus i need thousands to subscribe.


Please forward this to everyone you know, a tutorial on how to do this is linked here for those who use outlook express http://www.9cc.co.uk/downloads/forward_email.htm


hassle your contacts to subscribe email me at subscribe@9cc.co.uk

its free, what more could you want???

Monday, 2 July 2007

ecard scam

A big scam with ecards at the moment, various emails supposedly from greeting2000 and many more say "a mate has sent you a card".
The links are not forged, but either take you to a site to click a link, or directly download a virus onto your system.

Any legit ecard will say who it is from - you have been warned

dunc

Free Alerts

Hi and welcome to my free alert blog.

The idea is a free way of getting alerts on what genuine, whats a scam and what to look out for with the huge amount of crap that comes into email inboxes.

More will be posted soon