[4672] in WWW Security List Archive
Psychological virus
daemon@ATHENA.MIT.EDU (Aaron Abelard)
Wed Mar 5 17:32:17 1997
Date: Wed, 5 Mar 1997 15:09:42 -0500 (EST)
From: Aaron Abelard <aarona@iquest.net>
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
I recently found a user on our system whose webpage had what I would call
a "psychological" virus. From a technology standpoint nothing odd was
going on. The page consisted of some text which told the user the
website would create a file on your Hard Drive to prove it could be
done. Below the text was:
<form action="file:///c|/">
<input type=submit value=" Click to View File ">
</form>
And below that were instructions on how to delete the file named
command.com. Hopefully 75+ percent of users are smart enough to know
better, but some poor person could have taken it seriously.
--
Aaron Abelard / aarona@iquest.net
IQuest Internet / www.iquest.net
Indianapolis, IN / 317.259.5050.301
