F-Secure Virus Descriptions : NaughtyRobot

NAME:

NaughtyRobot

This is not a virus but a widespread hoax. Somebody has been distributing e-mail messages like the one below in the internet. Ignore them and do not pass them on.

  Subject: EMERGENCY - security breached by NaughtyRobot

  This message was sent to you by NaughtyRobot, an Internet spider that
  crawls into your server through a tiny hole in the World Wide Web.

  NaughtyRobot exploits a security bug in HTTP and has visited your host
  system to collect personal, private, and sensitive information.

  It has captured your Email and physical addresses, as well as your phone
  and credit card numbers.  To protect yourself against the misuse of this
  information, do the following:

         1. alert your server SysOp,
         2. contact your local police,
         3. disconnect your telephone, and
         4. report your credit cards as lost.

  Act at once.  Remember: only YOU can prevent DATA fires.

  This has been a public service announcement from the makers of
  NaughtyRobot -- CarJacking its way onto the Information SuperHighway.

Also see an article in the Wired magazine about this hoax: http://www.wired.com/news/culture/story/1798.html

[Analysis: Mikko Hypponen, F-Secure]