[ISN] New Word Macro Virus (With a twist)

From: mea culpa <jericho_at_dimensional.com>
Date: Thu 25 Jun 1998 - 16:26:00 CDT
Forwarded From: "Prosser, Mike" <Mike_Prosser@tds.com>
Originally From: Risks Digest

Date: Mon, 22 Jun 1998 01:32:39 +0300
From: Mikko Hypponen <Mikko.Hypponen@DataFellows.com>
Subject: New virus posts user documents to public newsgroups

A Word macro virus called WM/PolyPoster was recently found. As the number
of macro viruses is soon reaching 3000, there's nothing special about
this.  However, under the right conditions, this virus sends copies of a
victim's Word documents to 23 different Usenet newsgroups under subject
lines like "New Virus Alert!," "Important Princess Diana Info" and "How to
find child pornography." 

Risks are obvious and three-fold:

1. Private and confidential data is disclosed to the world

2. When unsuspecting fellow users download and read these documents, they
get infected themselves

3. The user's name get's archived to services like DejaNews as posting
messages related to software pirates or child porn.

More details at:
http://www.DataFellows.com/news/pr/eng/fsav/19980618.htm
http://www.DataFellows.com/v-descs/agent.htm

This virus is not known to be widespread at this time.


-o-
Subscribe: mail majordomo@sekurity.org with "subscribe isn".
Today's ISN Sponsor: Repent Security Incorporated [www.repsec.com]
Received on Mon Jun 29 10:24:39 1998
Google
 
Web www.infosecnews.org