Greg@SVTOA
11-15-2002, 07:45 PM
From McAfee systems:
Security Alert: Fake Email Greeting Cards
McAfee has noticed a resurgence in the fake email greeting cards that have been circulating. This Greeting Card application is not a virus, but has some of the same characteristics.
An email is sent, which invites the recipient to pick up an online greeting card. If the user clicks on the link to get their greeting card, and downloads the application, the application will capture all of the user's Outlook email addresses and send them an email as well.
Who is affected?
Fake Email Greeting Cards affect both home and business users.
What does this application do?
These fake email greeting cards are circulated by a company called Permissioned Media. This program requires users to download an installer, and agree to allow the program to email a link back to the website to all Microsoft Outlook contacts.
This application works when visiting a specific webpage on the www.Laugh-Mail.com website. A link to this page arrives in an email message as described below. Once this page has loaded, users are prompted to download and run an installer package.
If this agreement is not accepted, the program will get installed without the mass-mailing routing taking place. If the second agreement is accepted, the program emails all users in the Outlook Address book.
There are 3 variations of this Greeting Card Application:
SAMPLE EMAIL 1
Subject: %Recipient% you have an E-Card from %Sender%.
Body:
Greetings!
%sender% has sent you an E-Card -- a virtual postcard from FriendGreetings.com.
You can pickup your E-Card at the FriendGreetings.com by clicking on the link below.
http://www.friendgreetings.com/pickup/pickup.aspx?code=%recipient%&id=%code%
Message:
---------------------------------------------------------
%Recipient%,
I sent you a greeting card. Please pick it up.
%Sender%
---------------------------------------------------------
SAMPLE EMAIL 2
Subject: %Recipient% you have a greeting card from %Sender%.
Body:
%Recipient%,
%sender% has sent you an greeting card -- a postcard from Friend-Greetings.com. You can pickup your greeting card at Friend-Greetings.com by clicking on the link below.
http://www.friend-greeting.com/%number%/pickup.html?code=%name%&id=%number%
Message:
---------------------------------------------------------
%Recipient%,
I sent you a greeting card - please pick it up.
%Sender%
SAMPLE EMAIL 3
Subject: %Recipient% you have a funny card from %Sender%
Body:
%Recipient%,
%Sender% has created a funny card for you at Laugh-Mail.com, a web site where you can create fun cards for your friends.
View it here:
http://www.Laugh-Mail.com/%number%/pickup.html?code=%name%&id=%number%
Message;
+++++++++++++++++++++++++++
%Recipient%,
This card was really funny. I hope you enjoy it.
%Sender%
+++++++++++++++++++++++++++
If you get one of these e-mails, even if it appears to have come from a trusted source, DELETE THE E-MAIL!!!! DO NOT CLICK ON THE LINK IN THE E-MAIL!!!!!
Security Alert: Fake Email Greeting Cards
McAfee has noticed a resurgence in the fake email greeting cards that have been circulating. This Greeting Card application is not a virus, but has some of the same characteristics.
An email is sent, which invites the recipient to pick up an online greeting card. If the user clicks on the link to get their greeting card, and downloads the application, the application will capture all of the user's Outlook email addresses and send them an email as well.
Who is affected?
Fake Email Greeting Cards affect both home and business users.
What does this application do?
These fake email greeting cards are circulated by a company called Permissioned Media. This program requires users to download an installer, and agree to allow the program to email a link back to the website to all Microsoft Outlook contacts.
This application works when visiting a specific webpage on the www.Laugh-Mail.com website. A link to this page arrives in an email message as described below. Once this page has loaded, users are prompted to download and run an installer package.
If this agreement is not accepted, the program will get installed without the mass-mailing routing taking place. If the second agreement is accepted, the program emails all users in the Outlook Address book.
There are 3 variations of this Greeting Card Application:
SAMPLE EMAIL 1
Subject: %Recipient% you have an E-Card from %Sender%.
Body:
Greetings!
%sender% has sent you an E-Card -- a virtual postcard from FriendGreetings.com.
You can pickup your E-Card at the FriendGreetings.com by clicking on the link below.
http://www.friendgreetings.com/pickup/pickup.aspx?code=%recipient%&id=%code%
Message:
---------------------------------------------------------
%Recipient%,
I sent you a greeting card. Please pick it up.
%Sender%
---------------------------------------------------------
SAMPLE EMAIL 2
Subject: %Recipient% you have a greeting card from %Sender%.
Body:
%Recipient%,
%sender% has sent you an greeting card -- a postcard from Friend-Greetings.com. You can pickup your greeting card at Friend-Greetings.com by clicking on the link below.
http://www.friend-greeting.com/%number%/pickup.html?code=%name%&id=%number%
Message:
---------------------------------------------------------
%Recipient%,
I sent you a greeting card - please pick it up.
%Sender%
SAMPLE EMAIL 3
Subject: %Recipient% you have a funny card from %Sender%
Body:
%Recipient%,
%Sender% has created a funny card for you at Laugh-Mail.com, a web site where you can create fun cards for your friends.
View it here:
http://www.Laugh-Mail.com/%number%/pickup.html?code=%name%&id=%number%
Message;
+++++++++++++++++++++++++++
%Recipient%,
This card was really funny. I hope you enjoy it.
%Sender%
+++++++++++++++++++++++++++
If you get one of these e-mails, even if it appears to have come from a trusted source, DELETE THE E-MAIL!!!! DO NOT CLICK ON THE LINK IN THE E-MAIL!!!!!