Most Popular
| Top Stories | Commented | Featured |
Microsoft issues warning for IE6, IE7 security hole
Gigabyte adds USB 3.0, 6Gbps SATA to AMD boards
AdMob: iPhone accounts for 50% of global mobile traffic
Samsung intros 2TB, eSATA-packing Story Station Plus external HDD
News around the web: 15 best free Windows Mobile apps
TS Community
| User Gallery | Recent Discussion |
TechSpot at CES 2007 by Julio | Yahoo POP options by Didou |
Workstation by Greeno | Dragon wall by Condor |
Information Technology
New worm using AIM to spread
AIM users beware, a new worm has been unleashed that is making its rounds, trying to trick AIM users into clicking a link. Of course, the relatively benign looking message will end up infecting your machine (in some circumstances), turning your machine into a bot, which in turn will spread the worm further. Not just for the purpose of infecting multiple machines, advertising is playing a role in the development and strategy of this new baddie:
Repeated calls are made to a domain (freewebsites.com) that offers "free webhosting" in return for them placing what they call a small advert on your website. You can read more about this "small advert" here - I'd write more about it, but it's not relevant to this story so I'm keeping it separate. As you'll see a little later on, the reason this particular domain is constantly lighting up on the radar is due to the Botnet activity involved in this particular infection.
Tsk tsk. In some instances, your machine will become a part of a larger botnet, and could be used to download files onto and upload them to new PCs as well. Since it relies on just a link and a web exploit, potentially any IM client could be the vessel, so be careful. No word on what AV suites will currently prevent or cure this, but I'm sure we'll hear from them soon.
Repeated calls are made to a domain (freewebsites.com) that offers "free webhosting" in return for them placing what they call a small advert on your website. You can read more about this "small advert" here - I'd write more about it, but it's not relevant to this story so I'm keeping it separate. As you'll see a little later on, the reason this particular domain is constantly lighting up on the radar is due to the Botnet activity involved in this particular infection.
Tsk tsk. In some instances, your machine will become a part of a larger botnet, and could be used to download files onto and upload them to new PCs as well. Since it relies on just a link and a web exploit, potentially any IM client could be the vessel, so be careful. No word on what AV suites will currently prevent or cure this, but I'm sure we'll hear from them soon.
Related Stories
User Comments (1)
Post a comment| TimeParadoX on September 19, 2006 10:37 PM | So this only runs on AIM? I run only MSN and dont want to
accedently click a link on MSN that does the same thing.
|

TechSpot RSS



