'You've Received a Postcard' Virus
Netlore Archive: Messages with subject headers such as 'You've received a postcard from a school-mate!' or 'You've received a Hallmark E-Card,' etc. may contain links to malicious Web pages.
Description: Spoofed e-greeting card announcement
Circulating since: Mid-2007
Status: Real virus / Trojan threat
NOTE: Not to be confused with "Postcard" or "Hallmark Postcard" virus HOAX
Example:
Email text contributed by Jim H., July 8, 2007:
|
Subject: You've received a postcard from a School-mate! |
Analysis: Albeit reminiscent of hoax warnings about a supposed "Virtual Card for You" virus — which never existed — 2007 brought an onslaught of spoofed e-greeting card announcements which actually do contain links to Websites that are either running identity theft ("phishing") scams or are set up to transfer Trojan horse viruses and other malware onto your computer. (The same trick is also being used to transmit spam in the form of attached .PDF files.)
Antivirus experts recommend deleting such messages and never clicking on the links they contain unless you are quite sure the email originated from a legitimate source.
Among the subject headers to watch out for — and, mind you, these are just a few examples — are the following (any misspellings were in the originals):
- You've recieved A Hallmark E-Card!
- You've received a greeting card from a admirer!
- You've received a greeting card from a class-mate!
- You've received a postcard from a colleague!
- You've received a postcard from a family member!
- You've received an ecard from a friend!
- You've received an ecard from a mate!
- Someone sent you an ecard!
- You've received a greeting postcard from a neighbor!
- You've received a greeting ecard from a partner!
As in the email example above, these messages purport to come from legitimate e-greeting card websites such as greetingcard.org, bluemountain.com, hallmark.com, and many others. Note that in the above case, while the email says it was sent from greetingcard.org, the "direct URL" of the supposed e-card doesn't point to that address.
For more information about these malicious emails and how to avoid infecting your computer, see the resources below.
Share This Article
Further reading:
Greetings! Someone Has Sent You an E-Card Virus
PCWorld, 16 August 2007New Run of Greeting Card Trojans
About.com: Antivirus Software, 14 August 2007You Have 'Recieved' a Trojan
About.com: Antivirus Software, 4 June 2007Trojans Masquerade as Postcard
About.com: Antivirus Software, 21 May 2006W32/Nuwar@MM: Its Raining Postcards!
McAfee Avert Labs Blog, 29 June 2007
Last updated: 07/22/08
