The Channel logo


By | John Leyden 28th November 2005 17:15

NHTCU warns over Sober worm

Cyber-blitz enters second week

The latest variants of the prolific Sober worm series are posing as messages from the UK's National Hi-Tech Crime Unit, prompting a warning from the British police agency.

The tactic is an extension of an ongoing mass virus attack. Other organisations similarly spoofed last week include the FBI and CIA in the USA and the German Bundeskriminalamt. Society heiress Paris Hilton also featured as the subject of some of the attacks.

The scam emails claims to recipients that their internet use has been monitored and that they have accessed illegal web sites. The emails then direct recipients to open an attachment, which Reg readers will not be surprised to hear is infectious. This Windows-specific malware travels in an email message with the subject line of "You visit illegal websites" or "Your IP was logged" from spoofed email addresses such as and Users who open the infected message attachments on Windows machines will further propagate the outbreak, as well as leaving their machines open to additional attacks and misuse.

"These emails did not come from the NHTCU. Anybody who receives such an email should delete it without opening it," the police agency warns. NHTCU advises consumers to visit for tips on how to protect themselves and their computers for virus attacks. ®

alert Send corrections


Frank Jennings

What do you do? Use manual typwriters or live in a Scottish croft? Our man advises
A rusty petrol pump at an abandoned gas station. Pic by Silvia B. Jakiello via shutterstock

Trevor Pott

Among other things, Active Directory needs an overhaul
Baby looks taken aback/shocked/affronted. Photo by Shutterstock

Kat Hall

Plans for 2 million FTTP connections in next four years 'not enough'
Microsoft CEO Satya Nadella


League of gentlemen poster - Tubbs and Edward at the local shop. Copyright BBC
One reselling man tells his tale of woe