Virus Alerts

• FrSIRT Malware Advisories

  http://isc.sans.org

  
  
• F-Secure Virus News
  
• Symantec Security Response
  
• McAfee Threat Center
  
• Trend Micro Security Information
  
• Internet Storm Center
  

Fake Email messages from "abuse@mscd.edu"
Metro State Email accounts continue to receive fraudulent Email that appear to be FROM: "abuse@mscd.edu", "administrator@mscd.edu", "info@mscd.edu", "support@mscd.edu", "register@mscd.edu", or "webmaster@mscd.edu". These messages have been faked; they are being sent from computers infected with the "W32.MyTOB" computer worm. The infected computers are located OUTSIDE of the Metro State network. All computers deployed by IT at Metro State have the Symantec Anti-virus scanner installed on them.

These messages are NOT official college communications. Metro State will NOT notify you of problems with your account or ask you to "verify" or "update" your information in such a manner. You will always be directed to log into the MetroConnect portal to conduct such business. If you receive such a message, do NOT click on any links in the message or open any files attached to the message.

• Keep your anti-virus running and up to date.
• Backup your important documents and data.
• Be very careful about opening Email file attachments. You should not open an Email attachment unless all of the following are true:
  • You know the sender and have received legitimate Email from them in the past.
  • The subject line makes sense to you.
  • The text of the message makes sense to you.
  • You were expecting the sender to send you a file attachment.
  • You know what the file attachment contains.
  • You know why the attachment was sent to you.
  • You have a good quality, up to date, anti-virus scanner installed and running on your computer.
• Also see:Home Computer Security

Instant-messaging (IM) viruses and worms mutating at an alarming rate. Instant-messaging (IM) threats are mutating at an alarming rate, as virus writers attempt to bypass security-system updates that corporations use for protection. A record number of IM threat mutations have been recorded by IMlogic Inc., which has found that 88 percent of all worms tracked by its threat center also have mutations. The worst chameleon is the Kelvir worm, which has mutated 123 times during the last 11 months, the Waltham, Mass., vendor said. Art Gilliland, vice president of product for IMlogic, said, "IM threats are different than email threats. Updating virus signatures doesn't work well for IM, because the mutations are exceedingly fast and so is the speed with which these threats propagate." Source: http://www.techweb.com/wire/security/ 173603062