News

Mimail Worm Appears to Come from User's Own Administrator

Anti-virus vendors released a flurry of warnings over the weekend about a new e-mail worm called Mimail that is spreading in the wild. Symantec rated the virus as a 3 on its threat scale, a medium ranking that puts Mimail below only Bugbear on its current list of top virus threats.

Several vendors have published removal tools. Symantec's is available here.

Mimail arrives as an e-mail with "your account" in the subject line and an attachment called message.zip. The message appears to come from the e-mail address "admin" within the user's own domain.

When run, the attachment copies an executable to the hard drive, enters itself into the registry to run at startup and collects e-mail addresses from files all over the computer. It uses its own SMTP server to spread by e-mail, and it captures text from specific windows and sends them to e-mail addresses contained within the worm.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • SharePoint Framework 1.8 Now Generally Available

    Microsoft this week announced that SharePoint Framework 1.8 had reached "general availability" status, although some features are still at the preview stage.

  • How To Create Office 365 User Accounts in Bulk

    Manual account creation can be tedious, time-consuming and prone to human error, especially if you have more than a handful of Office 365 users to set up. Brien shows you a better way.

  • System Center 2019 Reaches General Availability

    System Center 2019 has now reached the "general availability" product stage, Microsoft indicated in a Thursday update.

  • SharePoint Online Users Getting News Improvements This Month

    Microsoft plans to roll out new capabilities for SharePoint Online users this month that will add greater control over how News articles appear in SharePoint sites, according to a Wednesday announcement.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.