SR News: Flashing IM (AOL) Hoax


Flashing IM (AOL) Hoax!

The following (hoax) warning has been widely forwarded:

       If you get a flashing IM, DO NOT reply or delete,
          but sign off immediately and re-sign on!
         Then change your password immediately.
           If you are unable to sign on, call AOL !!!
          The number is
         1-800-827-6364
          The Flashing IM is a password stealer.
         This has been confirmed by AOL.

         PLEASE FOWARD TO EVERYONE YOU KNOW!!

The above (of course) is a hoax; it contains the  classic  indication  of  a
hoax, the request to "forward to everyone". (Well, "forward"  is  misspelled
but this is also typical.) I have no idea what the "IM" refers to.  I  doubt
that it's Integrity Master (it goes by the nickname "IM") this "IM" probably
refers to an AOL "Instant Message".

        There is a real danger to many users!

Even though the above is a hoax warning, it presents some good  (but  rather
unclear) advice. Do not run any file attachments that you receive via  email
(unless you specifically requested the file). Doing so could run a trojan or
virus infected program. It is easy and takes only a minute  for  someone  to
create a brand-new trojan (not detected by any  scanner)  that  will  damage
your files. YOU CANNOT RELY ON YOUR ANTI-VIRUS SOFTWARE TO  DETECT  TROJANS.
Integrity Master can detect any trojan damage to your PC but most anti-virus
programs do not have this capability.

Read more about trojans and other threats to your data.

It is also true that there have been a number of  rogue  programs  sent  via
email to AOL users. Some of these programs are  virus  infected  and  others
attempt to steal and/or change the password of AOL users. (For  some  reason
AOL users get more than their share such attacks and also spam.) If you  use
AOL, I caution you to  be  extra  careful  whenever  someone  sends  you  an
unsolicited file. I would suggest you simply delete the email if you did not
request it.

Here is some more detailed information about AOL related attacks:

     AOL4Free:Trojan (and hoax)
     AOLgold trojan sent via email
     AOL Four Software Hoax Warning

Write to Stiller Research: support@stiller.com

                                     Copyright c 1998 Stiller Research.
                                    Document Last Modified June 6, 1998.

[=- 㡫  ୠ ᪨ 蠫 //  #2 //  1998  -=]
 4 "            L *.FRM "     h  /    >     M  "]  d*.MACk  o 0   s     "  "    ;O  