Clever new voluntary-virus morphology

[prog]

You get an email that actually looks like it may have been composed by a native English speaker welcoming you to a web-based community you may not necessarily recall asking to join, and providing a raw numeric IP address (uh oh) as a confirmation link.

Clicking the link calls up a bare-naked web page (uh oh) with a single line of text apologetically informing you that you need to download (uh oh) a "secure login" thingum to actually see the website, and offers another link to an .exe file (uhhh ohhh).

I assume that carrying on with the download and running the file would (if I were on a Windows box) instantly zombify my PC and put it to use making DDoS attacks against the Turkish government or whatever they're up to now. When it comes down to it I guess I'm really just impressed that the initial email actually doesn't look entirely unreasonable, except for the giveaway raw IP link.

Comments

[chocorisu.livejournal.com]

According to The Register this is the latest version of the Storm Worm, the one that's been "belching out toxic ecard scams". Lots of very sneaky metamorphic code stuff in there making it hard to detect. You don't want that on your PC!