Beware of "Customer Support Robot"

Just like the phony e-card from a friend, neighbor, spouse, or other unidentified source, the emails from "Customer Support Robot" are also packed with trouble. This time, however, the creators of the Storm Worm (Nuwar) have disguised the infected path with a URL link that when moused over yields the IP Address.

The subject may vary from "Spyware Alert!", "Trojan Detected!", "Virus Detected!", etc. Regardless of the subject, don't be fooled. Instead, click the delete key.

The link from the sample below was removed and changed to red:

"Dear Customer,

Our robot has detected an abnormal activity from your IP adress
on sending e-mails. Probably it is connected with the last epidemic
of a worm which does not have official patches at the moment.

We recommend you to install this patch to remove worm files
and stop email sending, otherwise your account will be blocked.

Customer Support Robot"

References:

• AusCERT
• F-Secure
• Internet Storm Center

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...