spolsky-joel@YALE.EDU (Joel Spolsky) (12/14/89)
[ Forwarded from comp.sys.ibm.pc ]
This is an urgent forward from John McAfee:
A distribution diskette from a corporation calling itself PC
Cyborg has been widely distributed to major corporations and PC user
groups in Europe. The diskette contains a highly destructive Trojan
Horse. The Chase Manhattan Bank and ICL Computers were the first to
report problems with the software. Systems that ran the enclosed
programs had all data on the hard disks destroyed. Hundreds of
systems were affected. Other reports have come in from user groups,
small businesses and individuals with similar problems. The
professionally prepared documentation that comes with the diskette
purports that the software provides a data base of AIDS information.
The flyer heading reads - "AIDS Information - An Introductory
Diskette".
If the software is installed using the included INSTALL program, the
first thing that the program does is print out an invoice for the
software. Then, after the system is re-booted a random number of
times the system self destructs.
Whoever has perpetrated this monstrosity has gone to a great deal of
time, and more expense, and they have clearly perpetrated the largest
single targeting of destructive code yet reported. The mailings are
professionally done, and the style of the mailing labels indicate the
lists were purchased from professional mailing organizations. The
estimated costs for printing, diskette, label and mailing is over
$3.00 per package. The volume of reports imply that many thousands
may have been mailed. In addition, the British magazine "PC Business
World" has included a copy of the diskette with its most recent
publication - another expensive avenue of distribution. The only
indication of who the perpetrator(s) may be is the address on the
invoice to which they ask that $378.00 be mailed:
PC Cyborg Corporation
P.O. Box 871744
Panama 7, Panama
Needless to say, a check for a registered PC Cyborg Corporation in
Panama turned up negative.
John McAfee
[See comp.sys.ibm.pc for more information.]