Gossamer Forum
Home : General : Internet Technologies :

"Mimail" Mass-Email Worm Propagation

Quote Reply
"Mimail" Mass-Email Worm Propagation
Synopsis:

ISS X-Force has detected the spread of a mass-emailing worm named
"Mimail". The Mimail worm is currently propagating aggressively across the
Internet. Mimail takes advantage of a vulnerability in Internet Explorer
to hide an executable program within what appears to be a benign HTML file
delivered to recipients via email.

Impact:

The executable payload of the worm is hidden within a HTML file that is
delivered in a compressed ZIP archive. Many Internet users believe that
HTML files are not dangerous. The Mimail worm was designed specifically to
appear to be benign, and to execute via a flaw in Internet Explorer.
Viruses or worms that propagate by exploiting flaws in software are
particularly dangerous, and they generally propagate more effectively.

For the complete ISS X-Force Security Alert, please visit:
http://xforce.iss.net/xforce/alerts/id/149
========================================
Buh Bye!

Cheers,
Me
Quote Reply
Re: [Stealth] "Mimail" Mass-Email Worm Propagation In reply to
Thanks, Stealth

I've been using the Firebird browser for a month or two, and I really love it. It's an offshoot of Mozilla. If people want to try a nice alternative to IE, go to the Mozilla site and jump to the Firebird pages. Mozilla, too, is really nice to use. I happen to prefer the unbundled Firebird version.

http://www.mozilla.org

------------------------------------------

Last edited by:

DogTags: Aug 2, 2003, 5:34 AM
Quote Reply
Re: [Stealth] "Mimail" Mass-Email Worm Propagation In reply to
I received this infected mail yesterday. I am frustrated about the e-mail expiry and opened the attachment. A black screen with message "Installing components foo.exe". I realised that something went wrong. After a quick search in the web, I found Solo Antivirus ( http://www.srnmicro.com ). It scanned my system and removed the virus. Alert! Do not open the message.zip file.