Feeds

Y2k fix email contains its own bug

Virus hidden in message that claims to come from MS

  • alert
  • submit to reddit

Reducing security risks from open source software

Email users are being warned to watch out for a sneaky virus that masquerades as a Y2k fix from the mighty Microsoft. Hackers have latched onto people's fears about the millennium bug, and created a selection of email messages that promise a free Y2k fix. But on opening, the email's attachment -- which claims to come from support@microsoft.com -- the user activates the virus, called Y2KCount. The next time they log on, the virus scans for their user name and password, and sends it back to the creators of the virus. Or at least that's the theory. These fraudsters can supposedly use the ISP account without the user's knowledge for free -- and send emails as if they were that person, according to Paul Brettal, product consultant at Data Fellows. "It is a clever virus because the anyone would be able to send emails and look like they work at that company. They would also get free access to the ISP account -- more of an issue in the US than the UK, where more ISPs make monthly charges." Brettal said the virus was under control, and had not yet surfaced in the UK. What's more, Jason Holloway, Data Fellows country manager, said the virus itself seemed to have a fault that would prevent it from wreaking havoc. "The Y2KCount virus seems to have a fault in the coding -- a problem in the activation routing. As far as we are aware, this means it has been unsuccessful in sending any user names and passwords back the creators of the virus. "This is similar to around 75 per cent of the viruses we see because they are largely made be amateurs." However, Holloway warned that the Y2KCount did show the dire possibilities of such a virus. Similarly, Microsoft is not taking any chances. Earlier this week, Don Jones, Microsoft's director of Year 2000 readiness, issued a warning: "The Y2k-related email message that claims to come from Microsoft is a hoax. Consumers should not open the attachment but rather delete it immediately." ®

Eight steps to building an HP BladeSystem

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
iPad? More like iFAD: We reveal why Apple fell into IBM's arms
But never fear fanbois, you're still lapping up iPhones, Macs
White? Male? You work in tech? Let us guess ... Twitter? We KNEW it!
Grim diversity numbers dumped alongside Facebook earnings
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
Bose says today IS F*** With Dre Day: Beats sued in patent battle
Music gear giant seeks some of that sweet, sweet Apple pie
Amazon Reveals One Weird Trick: A Loss On Almost $20bn In Sales
Investors really hate it: Share price plunge as growth SLOWS in key AWS division
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.