Worm baits hook with hints of pope plot

E-mails suggesting there was a conspiracy around Pope John Paul II's death or that Michael Jackson has passed away could be carrying a worm, experts have warned.

Sophos, a U.K. antivirus software maker, warned people on Tuesday about a new worm that poses as a breaking news alert. The worm, called Kedebe-F, spreads via e-mail and uses a variety of subject lines and message bodies.

People who take the bait and open the attached file risk having their security software disabled and may pass the worm on to others, Sophos said.

The worm can send a variety of messages. In addition to those linked to current events, the subject lines and message bodies could relate to a user's Internet account, adult material or other topics, according to an alert issued by Sophos.

One of the messages, as seen by Sophos, read: "Someone sent me this document which is stolen from a secret government body and deals about John Paul's death. It says he was killed by two 'doctors' who were hired by some government bodies. The text attached contains all the story behind his death and who these doctors are."

Ironically, another one of the messages that can be sent by the worm announces the supposed arrest of the author of the MyDoom worm: "Hey, this is to tell you that the author of the Internet Worm 'MyDoom' has been arrested by Microsoft today. He is an OLD MAN, about 50s."

The tricks used by this latest worm aren't new. Online scammers have often used breaking news, Internet account or network trouble and porn as bait for their traps, a method called social engineering. The names of Jackson, the former pope and al-Qaida leader Osama bin Laden have been used in scams before.

The W32/Kedebe-F worm is not spreading widely, according to Sophos. Up-to-date antivirus software should protect against the threat.

[Scott W]

are people stupid?

how the hell do people keep falling for stuff like this? i wouldn't be surprised if the next virus said: "Open my attachment. It is a virus that will wipe out your computer". there are so many sheep, they would actually open it.

[Bill Dautrive]

well..

Since the worm will only be fed on a windows box and people bought PC's and kept windows because they thought it was superior, is this a big surprise? This is why computer users either need to pass a simple test before they can operate any computer, or MS needs to make their crap secure out of the box.