New Sober Worm Progeny Spews German Hate Spam - 1,405 Views, 3 Comments

Summary: Tens of thousands of users woke up today to find German hate propaganda spam in their inbox. Piggybacking on the recent increase in activity of the Sober worm, the German hate spam is thought to take advantage of the trail left by ...

Previous Article « When Software Crashes Can be Lethal - Bug in Toyota Prius Software Causes Highway Stalling
Read Next Article » MSNBC.com Is the #1 News and Information Site on the Web (News Release)

Follow Anne on Twitter Friend Anne on Facebook

Tens of thousands of users woke up today to find German hate propaganda spam in their inbox. Piggybacking on the recent increase in activity of the Sober worm, the German hate spam is thought to take advantage of the trail left by the Sober worm, but is not a worm itself. Instead it uses PCs infected with the Sober worm to relay its hateful message, both in German and English.

Dubbed Sober-Q, experts say that the spam was sent over the weekend by someone with an axe to grind - or a cause to champion, depending on how you see it - but probably not for any financial gain. In other words, the spammer turned the spamming infrastucture created by the Sober worm into his or her own personal soapbox, rather than sending spam advertising a product.

Said Vincent Gullotto, vice president of McAfee’s virus research lab, “It is a one-time political message.”

Elaborated Scott Chasin, CTO of MX Logic, “Spam has been traditionally regarded as annoying messages that promote Viagra, porn and low cost mortgages. But for the past year we have seen a trend in which worm authors are using spam not to hawk goods, but as a tool for political propaganda.”

And hateful propaganda it is. The seemingly Neo-nazi affiliated spam decries the Dresden bombing, and the admittance of Turkey into the United Nations, and has such inciteful subject lines as “Multi-Kulturell = Multi-Kriminell” (multi-cultural = multi-criminal), “The Whore Lived Like a German”, and “Dresden 1945″.

New Sober Worm Progeny Spews German Hate Spam

Follow Anne on Twitter

Twitter Explained in Plain English

Friend Anne on Facebook

» New Worm Variant Attacking Windows - New Sober Worm Bilingual

» New Windows Worm Offers Free Soccer Tickets

» New Sober Worm More Titillating for Germans, But Serious Threat to All

For additional similar stories check out our archives on Spam

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

3 Comments »

I am really upset about this. Stupid nazis are spamming me? LAME. My inbox has recieved zero spam before this stuff, and now I get a lot. 14 today, and I’m sure there will be more as the virus spreads. Thankfully Kaspersky Labs has updated, and hopefully Synmantec and all the others will follow by the end of the night. I think everyone interested in this virus should check out this thread on DSL Reports, where there is some more good info on how people are being effected by this. http://www.dslreports.com/shownews/63586

Comment by matthew — 5/16/2005 @ 5:26 pm
I also got about 5 or 6 emails with German sexual ads. I used a free online translator to see what the email said. There was no attachment with the email. Some of the emails spoofed well known companies, such as Williams-Sonoma, and a couple of bank/insurance websites. I sent a copy of the email with the full headers to the spoofed companies, and Williams-Sonoma replied to me and said they had received over 900 such emails in one hour and were working on the problem. I don’t get those kind of German language emails anymore so it looks like it’s been fixed by Symantec and other companies.

Comment by Pamela — 5/17/2005 @ 8:05 am
I’m getting particularly annoyed by this one because, like all Sober worms before it, it spoofs the sender address. Thus, I’ve been getting bounces from a variety of addresses for this German stuff that I never sent out (and that I totally disagree with, but that’s another point entirely)…

Comment by codeman38 — 5/23/2005 @ 1:24 pm

RSS feed for comments on this post.

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!
If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.
Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This article first appeared on 5/16/2005

About

About TIP

About Anne

Follow Anne On:

Twitter
Linked In
Facebook

*Twitter Explained in Plain English

Search
Categories

Recent Comments to Our Articles

Dozer: I read where the Flexispy works for "smart phones" I have a Razr and the target phone is also a Razr. Would this software work read

"gunner": to: Chatoorgoon Jagdeo, congratulations, you have saved yourself time and money, and avoided seeing your hard earned money going into the pockets of thieves. well done read

"gunner": how many times do you have to be told, "the cake is a lie, there is no spoon" and the lottery is a scam read

"gunner": good reasons why i've avoided both "facebook" and "twitter" and will continue to do so read

Del Irwin: The service was ok for 5 years, though with hidden charges and lots of calls to get them removed. Very slimey company.. when I went read

william: my home boys comment isnt on here wtf read

william: I don't think his is a real becuse if it was why could they not just give them the rice?i thing that tis is just read

Harishchandra Salvi: Please help me to get my mobile Nokia 1209 Silver Grey IMEI: 356072033323873 i love my mobile very much and request you to help me pls. read

Pierre: Sad, sad, sad. You'd think that the designers of the Kindle would have known something about the real world, and that the product would read

Allen MacCannell: Hi Anne, Twitter is, sadly, not adding anything close to what Tweetdeck and Twhirl offer. Those two apps (+ the fantastic PowerTwitter Firefox plugin) setup a read

Todd: The link doesn't go to a form anywhere, and I can't find the form. Perhaps they don't allow this for anyone anymore. read

Jon: There are a couple of organisations clammering to purchase shares in City Networks Inc. One of them being "Penn Capital Management Ltd" in Osaka, Japan read

Fjord Prefect: The reason why Google is upset is this: Microsoft already owns 80% of the desktops in the world, they also provide IE which comes with read

Michael Anderson: The lawyer's comment is idiotic. A customer who has received poor service outside of the bounds of the terms of his agreement with the carrier read

Michael Anderson: This is not exactly correct. In most states, minors are able to form "voidable" contracts--that is, the minor can bind the competent party, but the read

Get a FREE summary of the week's articles by email every Friday!
We NEVER share your email address, and you can stop them any time!

Be sure to watch for the confirmation email!

Search

Get a FREE summary of the week's articles by email every Friday!
We NEVER share your email address, and you can stop them any time!

Be sure to watch for the confirmation email!