E-mail scam -- IMPORTANT!

[Jodie]

I received an e-mail with an attacment today and I *almost* fell for the scam. Yeah, I know... Anyway, I've posted it here because it's one that I've never seen before, and I wouldn't want anyone else to get caught downloading the attachment.

This has been a public service announcement from Jodie.

From: apfelmonster@gmx.de
To: User@yahoo.com.br
SendDate: Thu, 06 Oct 2005 09:09:16 GMT
Subject: FwD: I've got your mail on my account!


hello,
First I must say, my English is very very bad! Sorry about this.

Ok, I've got an email in my box, but this email is not for me, because,,, I'm not the recipient! The recipient are YOU !!!

This must be an email provider error, but I don't know!
I have made a Screenshot about this mail and saved in a zipped jpeg graphic file for you.


ok then,
bye

 

[Randy Whorewald]

Origin is Germany

They are getting more creative / sophisticated all the time. Based on the address it originated in Germany. Don't even reply to it. Don't open any attachments they send you! By the way your pix / site looks HOT!!! I didn't know you had so many degrees either.

 

[vancouverman]

it is not e-mail scam ... it is a virus ...
SOBER.AC is written in both German and English languages. It checks the users system for the version of the Microsoft OS that's running ... if it detects GMX as the domain, it installs one of the German versions; otherwise, it installs one of the English versions.

The worm propagates via email messages that are spammed to recipients. It has no automated capabilities and must therefore be inadvertently executed by the user to install. To entice the user to do this, the author utilizes classic social engineering techniques, disguising the attachment as either a zipped Word document or a zipped image file. The subject lines vary, but include statements such as of "I've got your mail on my account!"; "Your New Password"; and "Registration Confirmation".

SOBER.AC can download and run executable files from certain Web sites that it points to. However, this worm does not seem to have any backdoor capabilities.

 

[Randy Whorewald]

Some ppl do

The problem is that there are some people who don't know any better and they do open attachments, often with disastrous results.