About Me

Dmitry Gryaznov

Dmitry Gryaznov

Read More

Feeds & Podcasts

Blogs

Meet the Bloggers

Archive

Tags

#SecChat $1 million guarantee 12 Scams of Christmas access to live fraud resolution agents Acquisition Alex Thurber Android antivirus Apple botnet Channel Partners cloud security Compliance Consumer counter identity theft credit card fraud and protection credit fraud alerts credit monitoring credit monitoring and resolution critical infrastructure Cyber Security Mom cyberbullying Cybercrime cybermom data breach data center data center security Data Protection Dave DeWalt DLP Email & Web Security embedded encryption Endpoint Protection enterprise facebook fake anti-virus software Family Safety Friday Security Highlights global threat intelligence google government Hacktivism how to talk to kids how to talk to teens identity fraud identity fraud scams identity protection identity protection $1 million guarantee identity protection fraud identity protection surveillance identity surveillance identity theft identity theft expert identity theft fraud identity theft protection identity theft protection product Identity thieves and cybercriminals intel iphone kids online behavior lost wallet protection malware McAfee McAfee Channel McAfee Family Protection McAfee Identity Protection McAfee Initiative to Fight Cybercrime McAfee Labs McAfee security products Mid-Market Mobile mobile malware mobile security monitor credit and personal information Network Security online personal data protection online safety Operation Aurora PCI personal identity theft fraud personal information loss personal information protection phishing privacy proactive identity protection proactive identity surveillance Public Sector restore credit and personal identity Risk and Compliance scam scams scareware security smartphones social media social networking social networks spam Stuxnet twitter vulnerability Web 2.0 work with victim restore identity

McAfee Labs :

Nuwar's New Wave

Tuesday, March 4, 2008 at 8:29am by Dmitry Gryaznov
Dmitry Gryaznov

After a series of holiday related campaigns, Nuwar (a.k.a. Storm) is back to its ecard routine. E-mails promising funny ecards are being spammed all over the Internet. The usual http://numeric-IP/ links inside lead to a page like this:

Nuwar

A click on the picture leads to postcard.exe download, a click on the “click here” – to e-card.exe download. If nothing is clicked, in five seconds ecard.exe download is started automatically. Needless to say, all of the files are Nuwar.

Bookmark and Share

Submit your own comments / message for this post

Your email is never published nor shared. Required fields are marked *

 

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Comments (2)

  • Dmitry Gryaznov March 15, 2008 8:22AM

    Michel,

    There always are people with more curiousity than prudence. Children, for example. I don’t want to be responsible for letting them infect their computers. As for your need to know to be able to block that site – well, it’s not a single site. At any give moment there are thousands upon thousands of Nuwar-infected computers that serve those pages and malware. And they come and go. Blocking just one of them won’t do you much good.

    Reply
  • Mitchel March 15, 2008 3:12AM

    Why may we not see the website where its directing to ?
    Any user with a small amount of brain understand not to go to that site. I need it to protect my network, so i need that site, so i can block it.

    Reply