There seem to be a ton of computer worm variants hitting the Internet lately. Kudos to those technicians putting in overtime to identify them.

My favorite social engineering worm (at the moment) is WORM_BAGLE.J (aka W32/Bagle-J).

Dear user of e-mail server “___”,

Our antivirus software has detected a large ammount of viruses outgoing from your email account, you may use our free anti-virus tool to clean up your computer software.

Further details can be obtained from attached file.

Sincerely,

The __ team http://www.domain.com

The clueless user clicks on the attachment (the virus) and infects the computer. Brilliant! Some days it sucks to read IT help desk email.

There are of course other messages the outgoing email could use. I just can see a large number of people reading the one above and getting conned.

Preserved comments:

• It’s weird – I’ve already received 3 of these just since reading about this…and so have a few of my coworkers. They’re already cleaned – but still. Very tricky jerks these wormers.
  Posted 3/3/2004 9:25 AM by freekycheek

• Yeah. I had only gotten one at the time I wrote it. Since I have gotten another 8 emails.

  Of course, variants B,C, and D of another virus Netsky have been upgraded to medium threats which means they are more widespread. Betting Bagle.J will hit medium by tonight and high by the end of the week.

  Damn. If I could make $50 off everyone needing their machine cleaned and hire a 1/2 dozen people to work for me, then I’d e rolling in the dough.

  Posted 3/3/2004 11:26 AM by sneezypb
• Yep…it made it to our office apparently.
  Posted 3/3/2004 7:46 PM by anonymous