June 18, 2009 1:30 PM PDT

That e-mail attachment is not a Twitter invite

by Elinor Mills
  • Font size
  • Print
  • 6 comments

Twitter invites have a URL in the e-mail and not an attachment like this worm attack does, Symantec says.

(Credit: Symantec)

Symantec is warning about a mass-mailing worm that comes in an attachment pretending to be a Twitter invite.

"The observed messages appear as if they have been sent from a Twitter account; however, unlike a legitimate Twitter message, there is no invitation URL present in the body," a Symantec blog post says. "Instead, the user will see an attachment that appears as a .zip file that purportedly contains an invitation card."

The name of the attachment is "Invitation Card.zip" and Symantec identified it as W32.Ackantta.B@mm, a worm targeting Windows computers that was discovered in an e-card virus attack in February, according to Symantec. The worm gathers e-mail addresses from compromised PCs and spreads by copying itself to removable drives and shared folders.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
Recent posts from Security
Q&A: Researcher Karsten Nohl on mobile eavesdropping
RockYou sued over data breach
Hacker Gonzalez pleads guilty in Heartland breach
Microsoft rebuts IIS vulnerability claims
More attacks expected on Facebook, Twitter in 2010
GSM crypto code cracked, engineer says
Web-based Lookout protects mobile devices, data
Hackers claim to crack Kindle copyright armor
Add a Comment (Log in or register) (6 Comments)
  • prev
  • 1
  • next
by bobmarleypeople June 18, 2009 1:58 PM PDT
durrrrrrrrrr this attachment looks legit! **click** GAAAAAAA!!!!!

</stupid>
Reply to this comment
by sythara June 18, 2009 2:34 PM PDT
Lol, exactly.

The biggest vulnerability in Windows is a ******* user.

PEBKAC as we used to call it.
Reply to this comment
by JonathonStriker June 18, 2009 4:11 PM PDT
oh, and all this time I thought it was some stupid stalker really trying to get me to join ANOTHER site, like I don't have enough. I'm on facebook, don't currently have need for twitter, and sure wouldn't except a non-friend invite.
Reply to this comment
by ElizabethMoressi June 19, 2009 8:55 AM PDT
Wow Twitter is in more twouble. This site clearly needs a PR firm to get everyone feelin "warm and fuzzy" about them. Well at least they keep us in the loop about the constant phishing scams plaguing them.

Extended Validation SSL across all SocNet sites would be a huge push in slowing down the phishing. I am sure there is a performance issue, but really most users given the chance to opt in would probably be willing to compromise a bit of speed for some security.
Reply to this comment
by setjeff15081947 June 19, 2009 10:55 AM PDT
Anybody remember the opening sequence to the movie "Live Free or Die Hard"? Boom! The hacker kid gets blown out of his shoes. Are we closer than we care to think to that? Do I dare open another E-mail? I've kind of gotten used to having my intestines inside of me.
Reply to this comment
by Harrison912 June 22, 2009 12:02 PM PDT
Since I have a web site dedicated to safety and security products, I'm always interested in helping keep things a bit safer. Thanks, Elinor, for the heads-up.
Reply to this comment
(6 Comments)
  • prev
  • 1
  • next
advertisement

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right