OPEN SOURCE REPORTING INDICATES A NEW OUTBREAK OF ANOTHER STORM WORM VARIANT DURING THE CHRISTMAS HOLIDAY SEASON IN THE FORM OF E-CARDS. STORM WORM DEVELOPERS NOTORIOUSLY RELEASE NEW VARIANTS ON HOLIDAYS AND PREY ON THEIR VICTIMS WILLINGNESS TO OPEN FESTIVE GREETING CARDS.

DETAILS: INTERNET USERS SHOULD BE CAUTIOUS OF OPENING E-MAILS THAT APPEAR TO BE SENT DIRECTLY FROM GREETING CARD COMPANIES SUCH AS HALLMARK. CLICKING ON THE EMBEDDED LINKS COULD POSSIBLY DOWNLOAD A MALICIOUS FILE ONTO A VICTIMS COMPUTER THAT MAY COMPROMISE PERSONAL DATA. HALLMARK HAS PUBLISHED USEFUL INFORMATION TO ASSIST USERS IN RECOGNIZING AND MITIGATING THE EFFECTS OF THIS NEW SOCIALLY ENGINEERED ATTACK THAT INCLUDES:

HOW TO TELL IF A HALLMARK E-CARD NOTIFICATION IS REAL:

THE SUBJECT LINE OF LEGITIMATE E-CARD NOTIFICATIONS FROM HALLMARK WILL SAY, "A HALLMARK E-CARD FROM (NAME OF THE SENDER)" NOT A GENERIC TERM LIKE "FRIEND," "NEIGHBOR" OR "FAMILY MEMBER. THE E-MAIL NOTIFICATION WILL COME FROM THE SENDER'S E-MAIL ADDRESS, NOT HALLMARK.COM. THE NOTIFICATION WILL INCLUDE A LINK TO THE E-CARD ON HALLMARK.COM AS WELL AS A URL THAT CAN BE PASTED INTO A BROWSER. THE URL WILL BEGIN WITH HTTP//HALLMARK.COM/ FOLLOWED BY CHARACTERS THAT IDENTIFY THE INDIVIDUAL E-CARD.

MOVE YOUR MOUSE OVER THE WORDS "CLICK HERE" IN YOUR E-MAIL. IF YOU DO NOT SEE THE URL ABOVE, IT IS NOT A LEGITIMATE HALLMARK E-CARD.

HALLMARK E-CARDS ARE NOT DOWNLOADED AND THEY ARE NOT .EXE FILES. IN ADDITION, HALLMARK.COM WILL NEVER REQUIRE AN E-CARD RECIPIENT TO ENTER A USER NAME OR PASSWORD NOR ANY OTHER PERSONAL INFORMATION TO RETRIEVE AN E-CARD.

TO RETRIEVE A LEGITIMATE HALLMARK GREETING CARD, USERS SHOULD COPY AND PASTE CONFIRMATION CODES DIRECTLY ON THE HALLMARK E-CARD WEBSITE.

said by EGeezer :

I didn't CAPS the quote - apparently USN likes to use all caps

said by NetFixer :

Back in my day, the teletype machines used by the USN only had uppercase. Maybe this alert was written by an old fart who should have retired 20 years ago (or by someone trying to mimic the old teletype messages).