Guest guest Posted June 10, 2005 Report Share Posted June 10, 2005 Group, I usually keep up with emerging worms and viruses and missed this. Was the 4th I made a post and it never came to my email. I thus posted it 2 more times. When I went to the forums home site and saw it was there 3 times, was quite awed and embarrassed. Then just saw about the new worm that was posted on the 4th by Symantec, F-Secure and some other security groups I am in. A few AOL users I have corresponded with have had PC's mess up. AIM is in Netscape also. And they IM with AIM. Just a word of caution, watch out, whether this had anything to do with my accidental triple post, not sure. I apologise. Stay well.... ________________________________________________ New Worm Targets AIM Users Malware allows an attacker to gain remote access to your PC. E. Dunn, Techworld.com Users of AOL's instant messaging software, AIM, should be on the lookout for an innovative new worm, variously named " bot-B " and " Doyorg " by antivirus companies. Windows-based malware emerged early this week, and has made itself a nuisance for its ability to hijack the list of contacts or " buddies " in an infected user's IM account. After opening a window to any one of these contacts with the message " Hey check this out, " it invites users to follow an embedded link. Anyone who clicks on this will risk becoming its next victim. On machines where infection is successful, the worm creates a backdoor into Internet Relay Chat to download and run files on the instruction of the attacker, giving remote access to that PC. Intriguingly, the attempt to spread via AIM is not initiated immediately, and depends on a further instruction from the attacker to start the infection/attack cycle anew. This might explain why the infection cycle has thus far moved slowly without being widely commented on by antivirus companies. Although its effects are little worse than a nuisance right now, in the world of malware that counts for nothing. Graham Cluley of Sophos, an antivirus company that targets business customers, suggests that companies needed to consider whether IM was worth the risk. " Fundamentally, many businesses will have to ask their staff if they really need IM for their day-to-day work and if not it may be more sensible to take it away, " he says. " We're certainly seeing more instant messaging malware being written, although they haven't yet had the same kind of impact as email-aware worms or Internet worms. " _________________________ http://securityresponse.symantec.com/avcenter/venc/data/aol.pwsteal.32512.html AOL.PWSteal.32512 infects DOS .exe files. This Trojan can spread through intranets, the Internet, or other email. __________________________________ Discover Have fun online with music videos, cool games, IM and more. Check it out! http://discover./online.html Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You are posting as a guest. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.