Virus
Kedebe-F spreads via email using a variety of subject lines and message bodies

Pope worm turns nasty

'Conspiracy theory' about death of John Paul II lures unsuspecting users

Written by Robert Jaques

IT security experts have warned of a newly detected email virus which poses as breaking news stories about the supposed arrest of the author of the MyDoom worm, the capture of Osama bin Laden, or conspiracy theories about the death of the late Pope John Paul II.

The Kedebe-F worm (W32/Kedebe-F) spreads via email using a variety of subject lines and message bodies, according to Sophos.

Advertisement

Users who fall for the social engineering trick and launch the attached file risk disabling their security software and passing the infection to other computer users.

The worm can send a variety of messages, including: "Someone sent me this document which is stolen from a secret government body and deals about John Paul's death. It says he was killed by two 'doctors' who were hired by some government bodies. The text attached contains all the story behind his death and who these doctors are."

On other occasions, the text of the message can claim that Michael Jackson has died, Osama bin Laden has been captured by US soldiers, or the author of the MyDoom worm has been arrested by Microsoft.

Clicking on the attached file launches the worm, which disables security software installed on the computer and spreads the virus to other internet users via email and peer-to-peer file-sharing networks.

"Hackers are constantly trying to dupe computer users into running malicious code with the promise of breaking news stories," said Graham Cluley, senior technology consultant at Sophos.

"Using the late Pope's name is a sick trick designed to fool the unwary. Everyone should exercise extreme caution, run up-to-date antivirus software, and ensure they never run unsolicited email attachments."

Sophos reported in April that spammers were exploiting interest in the late Pope for a 'make money fast' scheme.

The Kedebe-F worm is not reported to be spreading widely. 

Tags:

Further reading

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Ministry of Defence

MoD data loss total could hit 1.7 million

New figures far higher than initial estimates   More...

Sun Microsystems

Sun Sparc server shatters seven standards

T5440 sets new benchmark records   More...

Gary McKinnon

Home Office turns down latest McKinnon appeal

Home Secretary informs lawyers of arrangements for US extradition   More...

Network cables

Network Instruments touts nanosecond apps troubleshooting

Observer 13 offers upgraded performance and forensic network analysis   More...

Primary Navigation