AP/CP: World Cup computer virus

[DJT]

From canada.com:

World Cup organizers warn of computer virus spread by fake e-mails

Canadian Press

May 3, 2005

FRANKFURT (AP) - A computer virus spreading through fake e-mails crashed the computers of the World Cup organizing committee Tuesday, overloading the system with millions of e-mails.

The virus is contained in attachments coming from senders with addresses such as "ticket(at)fifa.de" or "gewinn(at)fifa.de," telling fans they have won tickets to next year's tournament. Organizers were still unable to send e-mails late Tuesday, spokesman Gerd Graus said, adding that preparations for next year's World Cup were unaffected.

Like earlier versions of the Sober worm, the bilingual virus can travel in both English and German language e-mails as a malicious attached file. The worm can use a variety of different subject lines and message bodies, said Graham Cluley, senior technology consultant for London's Sophos computer security firm.

If a user opens the attached file, they'll get infected and the worm will mass-mail itself to other e-mail addresses found on the infected computer.

"Many people will be eager to attend one of the biggest sporting events in the world next year, and may think it is worth the risk of opening the e-mail attachment just in case the prize is for real," Cluley said.

Graus said e-mails from the organizers to fans confirming they had obtained tickets contained no attachments.

"If an e-mail has an attachment, it can't be from us," Graus said.

Fans who got tickets during the first selling phase that ended March 31 already had been informed by April 22.

Another selling period began May 2, for so-called team specific tickets, and those who ordered them got an immediate e-mail confirmation, also without an attachment.

Organizers already have foiled a fraudulent attempt to place more than two million orders for World Cup tickets from the United States.

© The Canadian Press 2005