Beware of Anonymous Email Online Postcards

The Internet Patrol default featured image
Share the knowledge

Yet another email online postcard virus has been launched. This time the unsuspecting user gets a postcard from a “secret admirer” or other anonymous source, and when the user follows the link in the email to retrieve their “postcard”, what they really end up retrieving is the Dloader-UT Trojan. Dloader-UT in turn then downloads the Trojan virus Dumaru-S which installs itself on your computer, allows others remote access to your system, and records your keystrokes!

Dumaru-S is also known as “Backdoor.Win32.Dumador.az”.

Explains Carole Theriault of Sophos, who has been quoted a lot this week (what’s happened to Graham Cluely?), “You may think you’ve received an electronic greetings card from a secret admirer, but in fact it’s a hacker who is going to be showing an unhealthy interest in you.”

Fortunately, most anti-virus programs should have definitions for Dloader-UT and/or Dumaru-S, so as always, update your anti-virus programs regularly!

This is apparently the week for Trojan postcards. A Spanish version of the email postcard Trojan hit earlier this week with the Mepe.A instant messenger worm.

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

Get New Internet Patrol Articles by Email!

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

 


Share the knowledge

6 thoughts on “Beware of Anonymous Email Online Postcards

  1. The lovebug 1136 wenet straight to my Spam Folder, and I looked at it but didn’t open the link!
    I sure am glad I didn’t fall for it and that I must have good, updated anti-virus program working

  2. Mine, signed “lovebug1136”, had a link to this site:

    But I didn’t click a followup link in the message body ON that site. I assume that sub-link would launch the virus, not just viewing the site itself? Or was mine a benign case?

  3. tfjgyjjgjhfjfhj yrjygjhghj fyjgjyrf yfjjhghg ggjkghkjgkkj fhjg hgyyj fjhg ghjgkjjk fjhgkkjh fhjgkgjk jkgkhgjkgjk kghgkjhjk jghgkgjkkj kjgkgkjjjhj fjhgg hfyjhjkb ghhgjj fgjyh ggkg ghggjk hggkg tgukgjkghf hfjhjvkjgk hjgkgkgj kjgjk gjkh.

  4. Got one of these this morning. Ashamed to say I tried to open it–I know better, but…

    AVG caught it.

    Don’t open stuff from “a friend” unless you’re expecting it.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.