'Vote virus' poses as plea for peace

Summary:Security experts warn that an e-mail urging a vote against war actually contains a nasty new file-deleting virus. It may not be cyberterrorism, but it could wreak cyberterror.

Security experts on Monday warned of a new file-deleting virus masquerading as a program that allows people to vote on whether the United States should go to war.

The "Vote Virus" is spreading via e-mail to users of Microsoft's Outlook e-mail program, said Simon Perry, vice president of security solutions at Computer Associates International.

The virus appears with the subject line: "Peace between America and Islam!" and the body of the e-mail reads: "Hi. Is it a war against America or Islam!? Let's vote to live in peace!" Perry said.

When the attachment entitled "WTC.exe" is opened, the virus deletes all the files on the computer's hard drive and sends copies of the original e-mail message to every address listed in the computer's address book, he said.

The virus also defaces any Web pages that are hosted by an infected computer to read: "America...few days will show you what we can do!!! It's our turn Zaker is so sorry for you."

The virus is believed to be the work of an opportunist and not associated with the Sept. 11 jetliner attacks on the World Trade Center and the Pentagon that left more than 6,000 people dead or missing.

"There is no evidence that this is related to the people who carried out" the attacks, Perry said.

"We feel this is likely to get quite a high pickup in that a lot of people are going to click on this," he said. "If the news about this doesn't get out before people get their e-mails, they're at risk."

Perry said he expects there will be more socially engineered viruses created in the future that will take advantage of people's interest in the attacks and the subsequent political and military repercussions.

"What this is, is a sick sense of humor," Perry said. "Chances are this is not any kind of cyberterrorism. It's just cyberterror."

As many as 10 large corporate customers of Computer Associates have been infected since the virus first appeared Monday morning, Perry said. Researchers do not know where it originated, but it has not yet hit Europe and Asia, he said.

Story Copyright © 2001 Reuters Limited. All rights reserved.

Topics: Malware, Security

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.