Another alert, this time in the form of a new email that has started circulating around the internet, as found/reported by anti-virus software maker Bitdefender (http://www NULL.malwarecity NULL.com/blog/fake-app-sends-you-and-your-pc-on-memento-mori-trip-1140 NULL.html). The email which will appear to come from someone you know talks about “A new Facebook Application”. The claim that you can download a file that will let you record a message on Facebook, so that “If you die” your loved ones can get a final goodbye from you. The email carries an attachment that ends in .exe (That alone should be your 1st WARNING SIGN).
Death obviously isn’t an easy subject and I can only assume the bad guys are hoping to pull at the emotions of the end user. So what happens if you download/open this attachment. The .exe file will install 3 encrypted executables, and when I say encrypted, I mean they will be extremely difficult to remove once they have made it on to your machine.
Once installed the files will
- Install and use a keylogger to record all user name / passwords and other “important” number sequences (like SS#, credit cards #’s, address information) from any visited website or email account and send that information to the bad guys
- Install software so that your installed webcam (and virtually all laptops these days have a built in webcam) will automatically take snapshot pictures and send those to the bad guys. (Which could put you in an even more compromising position depending on what these pictures show)
- Install software that could let someone (the bad guys) take over and remotely control your pc. (Haunted PC anyone)
As a side note concerning the bogus email, there is a legit Facebook app called “If I Die” (LINK) http://ifidie.net/ (http://ifidie NULL.net/) , which allows you to record a message for your Facebook. Those who are aware of the legit app may confuse this email for the legit app. This email has nothing to do with the legit app.
So what should you do
-
NEVER NEVER NEVER open any attachment unless you can confirm with the sender that they actually sent it and what it actually does.
-
Make sure to have your system updates (Windows, Office, Adobe Flash / Acrobat, Java, etc) up to date. Many of these malware software scams try and use bugs, holes, or issues with older versions of software to get into your system. (Like locking your front door but leaving a window wide open)
-
Always make sure that your Antivirus software is up to date. When I say up to date, I mean both the software itself and the “signature files”. If your software program is more than 3 years old, you really need to be getting a newer version. You should not be running Norton Antivirus 2003 in 2011 and expect the program to protect you. You should also go into whatever AV program you are running look for the signature file date and make sure that its no more than a couple of days old. Signatures are what AV companies update to include all the new viruses/malware that’s created.
-
LASTLY, DON’T BE STUPID AND DON’T BELIEVE EVERYTHING YOU SEE ON THE INTERNET OR IN AN EMAIL. When in doubt always make sure and ask someone before clicking where you don’t know. Remember the computer you save may be your own.
(http://www
