Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

German-language right-wing spam?

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » Archives » General Discussion (Through 2005) Donate to DU
 
im10ashus Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 12:31 PM
Original message
German-language right-wing spam?
This was sent to us at work by our IT department. Apparently, the fundies are going back to their Aryan roots:

FYI We have created a filter to block the spam internally, and we have been informed that Postini has done the same. It appears that this problem is widespread throughout the internet so if you care to send this along to family and friends, please feel free.

A FLOOD of German-language right-wing spam hit inboxes around the globe over the weekend, pushed out by PCs infected with a version of the Sober worm.

Carrying subject lines mostly in German, the emails have links to a variety of websites carrying articles supporting right-wing causes. However, the messages themselves contain no malicious code, although the sites that the emails link to may. That means opening these messages does no harm (though as a rule it is best to just delete and not open), but clicking on the links is not advised.

It's believed that the German text in the messages may have allowed them past text-based searches in anti-spam measures designed for English-language markets.

It appears that the emails have been propagated by the "Sober.q" variant of the Sober worm, which is the one we sent out warnings about last week. When a pc was infected with that virus, it became what is known as a "zombie" , under the control of the virus writer(s), listening for instructions from him. That virus was so successful , it created a network of "zombie" PCs (known as a "botnet" or network of robot pc's) which has been used to mount the spam campaign.

This is just a reminder to make sure your PC is up to date with anti-virus software, that it auto updates every day when you turn it on, have some sort of spam filter, some sort of ad-ware protection, and that you are no longer using windows 95, or 98. Most secure is Windows XP, but make sure you run windows updates automatically as well.

Over the last few days I have spoken to a few folks who thought that they could run their pc's without antivirus because they only visited safe sites and opened email from their friends. You are ill advised indeed to take those kinds of chances, because once infected, you will most likely loose all your data and compromise any passwords and usernames you use on various websites as well. As the spam attack illustrated today, virus writers not only can infect your machine, they can and do effectively take control of your machine and can do so without your knowledge. In addition, it will most likely cost you a considerable amount of money to have someone clean the machine, or re-install all your Operating System and software and reconfigure it. Alternatively, you may try to do it yourself at a cost of considerable time, and a great deal of aggravation.

You need to run antivirus on every pc that visits the internet, and keep it up to date.
Printer Friendly | Permalink |  | Top
Gruenemann Donating Member (753 posts) Send PM | Profile | Ignore Mon May-16-05 12:35 PM
Response to Original message
1. That explains it!
My work inbox was flooded with right-wing German spam this morning. I figured there had to be a virus involved. Thanks for posting the explanation.
Printer Friendly | Permalink |  | Top
 
sabra Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 12:38 PM
Response to Original message
2. We got hit here too!
Thanks for the post!
Printer Friendly | Permalink |  | Top
 
im10ashus Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 12:56 PM
Response to Reply #2
3. You are welcome.
I am fortunate enough to have not received any of the spam. Was it really right-wing?
Printer Friendly | Permalink |  | Top
 
sabra Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:00 PM
Response to Reply #3
4. Not sure if it was right-wing
here's an example:
http://www.spiegel.de/wirtschaft/0,1518,338652,00.html

Not really sure what it's all about?
Printer Friendly | Permalink |  | Top
 
im10ashus Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:05 PM
Response to Reply #4
5. Is it safe to click that? n/t
Printer Friendly | Permalink |  | Top
 
sabra Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:15 PM
Response to Reply #5
7. dupe
Edited on Mon May-16-05 01:15 PM by sabra
dupe
Printer Friendly | Permalink |  | Top
 
sabra Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:15 PM
Response to Reply #5
8. dupe
Edited on Mon May-16-05 01:15 PM by sabra
dupe
Printer Friendly | Permalink |  | Top
 
sabra Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:15 PM
Response to Reply #5
9. yep
some article at Spiegel... that's all.
Printer Friendly | Permalink |  | Top
 
im10ashus Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:20 PM
Response to Reply #9
10. Thanks.
My German is a little rusty.
Printer Friendly | Permalink |  | Top
 
Dimsdale Donating Member (466 posts) Send PM | Profile | Ignore Mon May-16-05 01:34 PM
Response to Reply #4
14.  Appears to be an abstract from Der Spiegel's archive..
Article from 26 Jan 05. appears to report on the Commerzbank board voting themselves and upper management pay increases despite having not exactly set the world on fire with their performances. Looks like the rationale was to provide incentive to managers to meet their business goals.

Looks like a typical archive abstract.

I subscribe to Die Deutsche Welle's news bulletin which is sent out twice daily. Someone several months ago began sending out spam under DW's name. They issued a disclaimer shortly thereafter. No virus problems encountered.

Printer Friendly | Permalink |  | Top
 
MsTryska Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:12 PM
Response to Original message
6. So it is spoofing then.....
One of my end-users got this variant - with nazi spam in it, but the kicker was she got it from another government agency - i found it dowbtful anyone would forwars nazi spam from there, and i know sober has an english and a german variant - so this must be what's hitting us now.

damn kids!
Printer Friendly | Permalink |  | Top
 
Blue_In_AK Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:25 PM
Response to Original message
11. I got some of those over the weekend...
...despite up-to-date antivirus and spam filter. I couldn't figure out where they came from and deleted without opening. Thanks for the explanation.
Printer Friendly | Permalink |  | Top
 
benny05 Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:29 PM
Response to Original message
12. Thanks for the info
My work e-mail was hit hard. I started noticing it on Saturday afternoon, then this morning I deleted about 50 messages. I just sent my IT folks a note and I'm running Norton again to be certain.

Probably a bunch of Neocons..or freepers :argh:
Printer Friendly | Permalink |  | Top
 
im10ashus Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 01:33 PM
Response to Reply #12
13. LOL!
Agreed. Just getting in touch with their inner hate.
Printer Friendly | Permalink |  | Top
 
Kellanved Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 02:48 PM
Response to Original message
15. It's the sober.q worm spreading Nazi-propaganda for an election in Germany
Printer Friendly | Permalink |  | Top
 
MrMonk Donating Member (1000+ posts) Send PM | Profile | Ignore Mon May-16-05 05:24 PM
Response to Original message
16. I feel cheated
I only received one message in German and it linked to "Kommunisten-online".
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Wed May 01st 2024, 11:53 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » Archives » General Discussion (Through 2005) Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC