[nsp-sec] ATTN Google - Malware on a Googlegroups workspace->setting for your mailbox copyright-abuse at columbia.eduarechanged (fwd)

[Krista Hickey]

Here's my overnight list to our corporate mail server,

http://nonstops.googlegroups.com/web/setup.zip
http://bitrixs.googlegroups.com/web/setup.zip
http://ferzom.googlegroups.com/web/setup.zip
http://felixss.googlegroups.com/web/setup.zip
http://mraks.googlegroups.com/web/setup.zip
http://gorlix.googlegroups.com/web/setup.zip
http://perlox.googlegroups.com/web/setup.zip
http://tacumbex.googlegroups.com/web/setup.zip
http://mozilloid.googlegroups.com/web/setup.zip
http://craterx.googlegroups.com/web/setup.zip

I haven't had a chance to inspect it myself but our corporate IT security guy says,

"This is not caught by our HTTP filter but our corporate AV picks it up (Downloader.MisleadApp). I had to scan it manually though as it is only caught on execution, not on write"

We thankfully use a different anti-spam/virus solution for our customers (Ironport) and the content filter (CASE) is properly dropping the plethora of messages.

Krista
7992

-----Original Message-----
From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of SURFcert - Peter
Sent: May-11-10 3:46 AM
To: Peter Moody
Cc: nsp-security at puck.nether.net
Subject: Re: [nsp-sec] ATTN Google - Malware on a Googlegroups workspace->setting for your mailbox copyright-abuse at columbia.eduarechanged (fwd)

----------- nsp-security Confidential --------