Times New Roman
ArialFrom
:Arial (address
is spoofed)
ArialSubject
:Arial (blank)
ArialBody
Text:Arial
Arial • new price
Arial There is indication in
the file that it may also try to password-protect some ZIP files, in
which case it will add one of the following to the message body:
Arial • The password is
Arial • Password:
Arial The password will then
be contained in an embedded image file.
ArialAttachment:Arial
(may be one of the
following)
Arial • price.zip
Arial • price2.zip
Arial • price_new.zip
Arial • price_08.zip
Arial • 08_price.zip
Arial • newprice.zip
Arial • new_price.zip
Arial • new__price.zip
Arial The ZIP file contains
PRICE.EXE and PRICE.HTML, as described above.
Arial0000,0000,FFFFFor
more information see:
http://vil.nai.com/vil/content/v_127423.htm
ArialInformation Security Services
ArialUniversity of Oklahoma
ArialHealth Science Center
Arial0000,0000,FFFFhttp://www.ouhsc.edu/it/security/