[ad]<\/p>\n
Storm is back in the festive season spreading some xmas and new year love. They even have a new year greeting site ready for spreading New Year related Storm Worm variants.<\/p>\n
Social Engineering again, people are always more susceptible during holidays, I guess they are happy and less paranoid.<\/p>\n
The Storm Worm gang are spreading seasonal ill-will. Security watchers have spotted New Year greeting spam runs that attempt to direct recipients to a malicious web site called uhavepostcard.com.<\/p>\n
Anti-virus firm F-Secure warns<\/a> that although the site remains free of exploits (for now) the spam run is likely to be a prelude for a New Year’s Eve-themed Storm Worm attack.<\/p><\/blockquote>\n
Things are getting tricky again, these Storm guys are really pushing the envelope for global domination with their nasty botnet, I guess there really is a lot of money in the business.<\/p>\n
Malware miscreants are making early preparations for the New Year after they left it too late for Christmas, only striking on Christmas Eve. A widely-circulated email first distributed on December 24 pointed to a website containing a malicious Santa Claus-themed striptease.<\/p>\n
The emails, which have varied subject lines including “Your Secret Santa”, “Santa Said, HO HO HO”, “Warm Up this Christmas” and “Mrs. Clause Is Out Tonight!” attempt to entice prospective marks into visiting a website containing images of scantily clad young women in a Santa suits. The images and \u201cDownload for free now!\u201d button both linked to a variant<\/a> of the Storm Worm, anti-virus firm Sophos reports.<\/p><\/blockquote>\n
So make sure you tell people, be careful about greeting cards from unknown addresses. And well let’s face it, be careful about anything from any address, don’t simply run executables you didn’t request and don’t go to dodgy sites – stick to Yahoo! Hallmark and other well known e-card providers.<\/p>\n
You can read more on SANS ISC about Storm here<\/a>.<\/p>\n
<\/p>\n