Virus Checks and Government Departments

oneye14

Virus Checks and Government Departments
I understand last Friday an email from the BIS (Business Innovation & Skills) set off anti-virus alarms with what appears to be, or a variation of:-

ZeroAccess botnet

It took until Monday to come back with the usual message of "Do not open attachments, Do not click on links" etc.
But
- Claimed the email had not been sent from BIS
- Customers should be assured that the data we have has not been compromised

This lead to a response of:

So, your email sevice has been hacked but everything else is fine ?

There has been no reply to this or any other comment.
Where has the Webmaster gone that used to be on Websites ...

I'm no expert on the subject but apparently ZeroAccess is a fairly virulent trojan that targets operating systems.
I get the impression that no one in BIS knows what is happening or what to do about it.

LeeSouthEast

How have you determined the email was sent through the BIS network? From: addresses can be spoofed in a matter of seconds.

oneye14

LeeSouthEast wrote: »

How have you determined the email was sent through the BIS network? From: addresses can be spoofed in a matter of seconds.

The recipient recognised the the name of the sender in their email address.

LeeSouthEast

Unless you checked the headers to ensure this did come from BIS it is more likely someone just spoofed it.

joe134

oneye14 wrote: »

Virus Checks and Government Departments
I understand last Friday an email from the BIS (Business Innovation & Skills) set off anti-virus alarms with what appears to be, or a variation of:-

ZeroAccess botnet

It took until Monday to come back with the usual message of "Do not open attachments, Do not click on links" etc.
But
- Claimed the email had not been sent from BIS
- Customers should be assured that the data we have has not been compromised

This lead to a response of:


There has been no reply to this or any other comment.
Where has the Webmaster gone that used to be on Websites ...

I'm no expert on the subject but apparently ZeroAccess is a fairly virulent trojan that targets operating systems.
I get the impression that no one in BIS knows what is happening or what to do about it.

As stated , I,ve just got rid of it on daughters pc, thanks to waddler, so, it certainly is going around.
Don,t know where she got it, but not from, Bis;

oneye14

LeeSouthEast wrote: »

Unless you checked the headers to ensure this did come from BIS it is more likely someone just spoofed it.

I checked with the recipient -

name of the sender in their email address.

the senders email was expected with attachments - the header was correct too

Would the spoofer know which email address to send from and get the timing right...

My point is

impression that no one in BIS knows what is happening or what to do about it

waddler_8

impression that no one in BIS knows what is happening or what to do about it

There's not a lot anyone can do if a spammer is spoofing their address - it happens to all.

oneye14

waddler_8 wrote: »

There's not a lot anyone can do if a spammer is spoofing their address - it happens to all.

Would the spoofer know which email address to send from and get the timing right...

I'm not convinced it was spoofed

waddler_8

oneye14 wrote: »

I'm not convinced it was spoofed

It will have been - it happens all the time.

tronator

oneye14 wrote: »

... the header was correct too

What does this mean? What header? Post all "Received:" headers, but replace all sensitive information like email addresses.

oneye14 wrote: »

Would the spoofer know which email address to send from and get the timing right...

Maybe the recipient's PC is already infected with some other virus. Then all information it needs are already there...

oneye14

The BIS have eventually confirmed they sent the email on 13 September 2013 which set off the alarm......
..So nothing was compromised was it .......

So, your email sevice has been hacked but everything else is fine ?

No answer to that or any other explanation .... :cool: