Possible "e-card" virus?

[hrj]

My e-mail inbox this morning contained two messages that claimed to be "virtual greeting cards" that I could access by clicking on a link. The links wanted to download an executable file (I declined the opportunity). The notification e-mails contained no information about who was (purportedly) sending me the card. I am, on the face of it, inclined to consider these to be random viruses (particularly since snopes.com mentions a class of viruses that use exactly this approach). But then, I'm naturally suspicious and cynical about these things. On the other hand, I have received genuine virtual greeting cards in the past -- always with the sender's name mentioned in the notification e-mail, and always linking to a web site rather than a download. So it's possible that someone out there was genuinely trying to send me a card and used a system that's superficially indistinguishable from a malware site. Just a general cautionary tale, I guess. If you want to "surprise" someone electronically, it's a kindness to present your bona fides, not only so that your message won't get summarily trashed, but so that you don't assist in lulling the unwary into thinking it's harmless to click anonymous links. And if you're among the non-suspicious and non-cynical out there (yes, Mom, this means you!), think twice before clicking a link in an anonymous "electronic greeting card".

Comments

[green-knight.livejournal.com]

I had more of them than I have friends, and like you, I'm cynical. The genuined ones I had were, as you said, complete with 'so-and-so sent it' and links to websites.

[cellio]

I got one of those a few days ago and deleted it without trying the URL. So far, all the legitimate ones have identified the senders, and I couldn't think of a reason for anyone to be sending me a card right now.

[(Anonymous)]

I wouldn't do that. Mom

[goldenstag.livejournal.com]

Definitely sounds like a virus ...

[mastersantiago.livejournal.com]

Yes, these are "virus" messages. They have been going around for a number of years now. Basically they are remailed from various e-card servers. Many legitimate e-cards do have "extras" like music, but they shouldn't ever need to download anything in order to play it.

[mamaalanna.livejournal.com]

I'm getting two and three of them a day. The first one, like you, I was suspicious, so I went to my preferred e-card company and sent myself one, anonymously. Even so, my own email address popped up in the missive (i.e., MamaAlanna@MyISP.com has sent you a greeting card.)