OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
AIM attack?

From: Russ (Russ.CooperRC.ON.CA)
Date: Wed Feb 11 2004 - 14:24:14 CST

A number of people have posted asking about something strange their
seeing in AIM.

NAI have it documented here;
http://vil.nai.com/vil/content/v_101007.htm

A chat popup occurs which includes a link and the phrase "check out this
link". It purports to display something about the capture of Osama.
Others are very polite about what they're calling it, I call it Adware.
You have to accept the terms of the installer in order for it to run,
but in those terms you agree to allow them to send the link to all of
your contacts in AIM. It will also send more spam repeatedly to those
contacts.

NAI have documented the details of where its found.

Cheers,
Russ - NTBugtraq Editor

-----
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
-----