|
"Virus Hoax: Malicious Code Example"
Virus Hoax Warnings: Page 11
of 39
NaughtyRobot
Quite a few Web site administrators have received email messages
that seem to be originating from the same machine hosting the Web
site. The email headers are apparently being forged to hide the
original sender of the message. The mail being received contains the
following: Subject: security breached by NaughtyRobot
This message was sent to you by NaughtyRobot, an Internet spider
that crawls into your server through a tiny hole in the World Wide
Web.
NaughtyRobot exploits a security bug in HTTP and has visited your
host system to collect personal, private, and sensitive information.
It has captured your Email and physical addresses, as well as your
phone and credit card numbers. To protect yourself against the
misuse of this information, do the following:
1. alert your server SysOp, 2. contact your local police, 3.
disconnect your telephone, and 4. report your credit cards as lost.
Act at once. Remember: only YOU can prevent DATA fires.
This has been a public service announcement from the makers of
NaughtyRobot -- CarJacking its way onto the Information
SuperHighway.
The NaughtyRobot email message appears to be a hoax. There is no
indication that any of the problems described in the body have taken
place on any machine.
Copyright 2004 by Jay Jennings
|