A component called Microsoft Data Access allows applications to connect to various data sources, but the one being offered by scammers will drop a worm onto a PC.
Storm Gang Offering Fake Microsoft Tool
Criminals behind the Storm worm have a new trick playing on the Internet. It builds on the recent bombardment of e-greeting card spam hitting inboxes around the world.
Rather than delivering a worm as the fake e-card, F-Secure noted a twist in how the Zhelatin gang, blamed for the Storm worm, tries to infect a system:
You still get the normal greeting card spam...But when you follow the link, the web site now talks about the need for you to install "Microsoft Data Access" to your computer. Conveniently, they have it available for download, for free.
The legitimate Microsoft Data Access component has been available for various forms of Windows all the way through Vista. It's also been the focus of quite a few security problems over the past few years.
Downloading anything from a link in an unsolicited email message is never a good idea these days. People can protect themselves best by deleting these greeting card emails when they appear, and spare themselves the grief of having to clean an infected machine.
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
iEntry 10th Anniversary
RSS
Archive
