Alert: Worm posing as IE cumulative patch

[Michael Perelman <michael@xxxxxxxxxxxxxxxxx>]

Ravi thought that this might save someone some grief.

Lots of people have emailed me about the email making the rounds which
states its from "Microsoft Corporation Security Center" and has a
subject line of "Internet Security Update".

The email has an attachment which the message claims to be the "1 Mar
2002 Cumulative Patch" for IE.

In case you don't already know, there isn't such a patch and its not
from Microsoft. Microsoft never emails out patches.

The bogus email is actually the GIBE worm, a description for which can
be seen at;

http://www.f-secure.com/v-descs/gibe.shtml
http://www.sarc.com/avcenter/venc/data/w32.gibe@xxxxxxx
http://vil.nai.com/vil/content/v_99377.htm
http://www.antivirus.com/cgi-bin/vinfo.pl?OneVirus=WORM_GIBE.DR

Just to provide a few references (check the home page of your anti-virus

vendor for details)

Cheers,
Russ - NTBugtraq Editor



--

Michael Perelman
Economics Department
California State University
michael@xxxxxxxxxxxxxxxxx
Chico, CA 95929
530-898-5321
fax 530-898-5901