Tsunami Disaster Donation Plea Is Really A Virus

Virus experts at Sophos have discovered a mass-mailing worm that poses as a plea for donations to help with the Indian Ocean tsunami disaster.

The VBSun-A worm (W32/VBSun-A) spreads via email, tempting innocent users into clicking onto its malicious attachment by pretending to be information about how to donate to a tsunami relief effort. However, running the attached file will not only forward the virus to other internet users but can also initiate a denial-of-service attack against a German hacking website.

Emails sent by the worm arrive with the subject line ‘Tsunami Donation! Please help!’ and the message text ‘Please help us with your donation and view the attachment below! We need you!’. The worm has an attachment ‘tsunami.exe’.

“Duping innocent users into believing that they may be helping the tsunami disaster aid efforts shows virus writers stooping to a new low,” said Graham Cluley, senior technology consultant at Sophos. “This gruesome insensitivity is a despicable ploy to get curious computer users to run malicious code on their computers. Everyone should be wary of unsolicited email attachments, and visit the established charity websites instead if they wish to assist those suffering as a result of the disaster.”

VBSun-A is not the first virus to try and take advantage of the tsunami disaster in an attempt to spread. The VBS/Geven-B worm tried to spread a sick message earlier this month that the tsunami was God’s revenge on ‘people who did bad on earth’. There have also been a number of email scams distributed by criminals posing as victims in an attempt to steal money.

Although there have only been a small number of reports of the VBSun-A worm, Sophos recommends computer users ensure their anti-virus software is up-to-date, and that companies protect themselves with a consolidated solution which can defend them from the threats of both spam and viruses.

Further details about VBSun-A can be found at: www.sophos.com/virusinfo/analyses/w32vbsuna.html

Don't miss