Security Alert, Emails Containing Viruses

Recently many incentre.net users have been receiving dangerous and deceptive emails.  These messages were not sent by The Internet Centre, they originate from computers around the world that have been compromised - computers that are being remotely controlled with malicious intent. 

These emails were NOT sent by Internet Centre Support, and they may contains a variant of the Win32/FakeRean virus - or a different virus.  Do not open any attachment(s) or hyperlinks in these emails.  If you already have, please run a virus scan as soon as possible.

The offending, problematic emails often look like this:

 

Dear owner of the email@address mailbox, You have to change the security mode of your account, from standart to secure. Please change the security mode by using the link below:

http://accounts.incentre.net.dlsports.be/webmail/settings/noflash.php?mode=standart&id=8834316090298972264164081400635&email=email@address

 

 -------OR-------

 

From: This e-mail address is being protected from spam bots, you need JavaScript enabled to view it [mailto: This e-mail address is being protected from spam bots, you need JavaScript enabled to view it ]

Subject: your mailbox has been deactivated

We are contacting you in regards to an unusual activity that was identified in your mailbox. As a result, your mailbox has been deactivated. To restore your mailbox, you are required to extract and run the attached mailbox utility.

Best regards, incentre.net technical support. 

 

-------OR-------

 

Dear user of the incentre.net mailing service!

We are informing you that because of the security upgrade of the mailing service your mailbox This e-mail address is being protected from spam bots, you need JavaScript enabled to view it settings were changed. In order to apply the new set of settings open zip attached file.

Best regards, incentre.net Technical Support.

 

-------OR-------

 

Attention!

On October 22, 2009 server upgrade will take place. Due to this the system may be offline for approximately half an hour.  The changes will concern security, reliability and performance of mail service and the system as a whole.   For compatibility of your browsers and mail clients with upgraded server software you should run SSl certificates update procedure.  This procedure is quite simple.  All you have to do is just to click the link provided, to save the patch file and then to run it from your computer location. That's all.

http://updates.worldgate.ca.secure.adm-1.net/mail/id=78227813-user@ worldgate.ca-patch01453.exe

(OR: http://updates.incentre.net.secure.1-cert.com/mail/id=7733995169-user@ incentre.net-patch67796.aspx)

Thank you in advance for your attention to this matter and sorry for possible inconveniences.

System Administrator

 


 

These emails were NOT sent by Internet Centre Support, and they may contains a variant of the Win32/FakeRean virus - or a different virus.  Do not open any attachment(s) or hyperlinks in these emails.  If you already have, please run a virus scan as soon as possible.

As a general rule, The Internet Centre will NEVER send out an arbitrary link asking you to download and run software, an attachment with a filetype like ZIP or EXE, or ask you in an email for private information like your password, your credit, or banking information.

The email address in the body of the message may or may not match your own email address, and the original recipient email address may not either.  Details about the primary virus can be found here:  http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2fFakeRean

 

Webmail Login

E-Mail

Password









Search our page




Partners

Postini

Fortinet

Life Size

ICCAN

Alberta SuperNet