FW: Sircam infects the Feds

[Owen Blacker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sorry, ordinarily I wouldn't forward stuff like this, but it made me smile,
and it's possibly of interest, if a little off-topic  :o)

> -----Original Message-----
> From: Java_Security@itw.itworld.com
> Sent: Friday, July 27, 2001 12:22 PM
> 
> 
> JAVA SECURITY --- July 27, 2001
> Published by ITworld.com -- changing the way you view IT
> http://www.itworld.com/newsletters
> ______________________________________________________________
> 
> [deletia]
> 
> Sircam Hits FBI Cybersecurity Group 
> By Sam Costello
> 
> The Sircam virus has struck what may seem like one of the most unlikely
> places: The National Infrastructure Protection Center, the cybersecurity
> organization created by the U.S. Federal Bureau of Investigation,
> according to a report by the Wall Street Journal Online.  
> 
> The worm infected the PC of a researcher at the NIPC, and though it did
> not spread throughout the NIPC, Sircam did send eight internal documents
> marked "official use only" to outsiders, the Journal reported. The
> Journal also reported that no classified or sensitive information was
> released, according to FBI spokeswoman Debbie Weierman. Weierman did not
> return repeated calls for comment from the IDG News Service Wednesday
> morning.  
> 
> Sircam is an e-mail worm that has been spreading at speedy clip over the
> past week. The worm arrives as an e-mail in either English or Spanish
> bearing the message "Hi! How are you? I send you this file in order to
> have your advice. See you later. Thanks."  
> 
> Sircam will either grab a document off the hard drive of the infected
> system and resend it when the worm spreads, thus potentially spreading
> sensitive or confidential files, or, in some cases, delete all files on
> the system's hard drive. When the attachment sent with an infected e-mail
> is double-clicked, the worm searches the PC's Windows Address Book for
> e-mail addresses and sends itself to all addresses listed there.  
> 
> [deletia]
> 
> Copyright 2001 ITworld.com, Inc., All Rights Reserved.
> http://www.itworld.com

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4
Comment: Due to RIP, pls check for revocation before using this key!

iQA/AwUBO2FzUVVeQSYAA2h0EQIKGACg7Ak+I2x03drS7xvKaSMy1bUxEQ4AniWw
Zr+3I44gdf52S5nn0mKcnVfX
=FhhW
-----END PGP SIGNATURE-----

_____________________________________________________________________
This message has been checked for all known viruses by UUNET delivered 
through the MessageLabs Virus Control Centre. For further information visit
http://www.uk.uu.net/products/security/virus/