New twist on an old computer virus
Received an e-mail message today saying I have “an e-card from a family member.” It included a link from “zzwrong.hk.” This is a variation of similar messages that usually included a random name — usually a female name — in place of “family member.” Clicking on the link takes the recipient to a Web site that attempts to exploit their Web browser, then returns a page stating “We are currently testing a new browser feature. If you are not able to view this ecard, please _click here_ to view in its original format.”
The link presented in “click here” goes to a Trojan downloader that downloads multiple components, making up a “Storm Worm” infection. Presumably, if any of the browser exploits above work, the downloader Trojan will be downloaded and run without user interaction.
Don’t click on the links, and don’t worry, any e-card from zzwrong.hk won’t be coming from any member of your family.