10/11/2004: Fake Support Email Message from ucla.edu Support Team
If you receive an email that appears to originate from the ucla.edu support team and contains an attachment, do not open the attachment. Please DELETE this email. This is an attempt to infect your computer with a variant of the Bagle worm. The email will be similar to one of the following:
Hello user of ucla.edu email server
Your email account will be disabled because of improper using in next three days, if you are still wishing to use it, please resign your account information. Pay attention on attached file.
The Management,
The ucla.edu team
Dear user of ucla.edu email server
Our main mailing server will be temporarily unavailbe for next two days, to continue receiving mail in these days you have to configure our free auto-forwarding service. Pay attention on attached file.
Best wishes,
The ucla.edu team
This email does NOT originate from Bruin OnLine. Do NOT open the attachment. This particular virus has spoofed/faked its "From:" email address to appear as if it originates from ucla.edu. Viruses use messages like this to propagate themselves. These messages always contain a copy of the virus and are usually easy to spot by the improper use of English and by the overall generic nature of the salutation, closing, and signature. BOL rarely sends email directly to users unless it is in response to a user email for support, and we will never ask for your account password information or other details through email.
More details on this worm are available from the Sophos website at http://www.sophos.com/virusinfo/analyses/w32baglek.html. All BOL users should have an anti-virus application installed. Sophos is available from the BOL website.
We apologize for any inconvenience this may cause. If you have any questions please contact the BOL Help Desk at (310)825-7452, option 1, or at consult@ucla.edu.