New AIM Worm Making the Rounds
527366
A new worm has surfaced affecting the AOL Instant Messenger network, security firm FaceTime reported this week. The malware disguises itself as a JPEG image to deliver a Trojan horse onto a PC when executed.
605561
NEW YORK: At least one new variant of a worm spread rapidly from Asia and Europe to US computers on Friday morning, filling up people&#39;s e-mail accounts, but otherwise causing little apparent damage.
384665
Skype users should be wary of a new worm that is making its way through the network via the application's chat feature, the company said Monday.
571357
A new worm, W32/Funner, is spread over the MSN Messenger instant messaging networks. Experts say it has caused minimal damage, but they say IM networks are ripe for more virus attacks.
672973
Making use of the current trend to send festive greetings via email, a new virus is making the rounds. A variant of the ZAFI worm, the WORM_Zafi.
132097
(InfoWorld) - A sophisticated computer worm spreading via AOL Instant Messenger (AIM) is setting up a botnet that may be difficult to combat, security researchers said. The worm, known as W32.pipeline, propagates when AIM users click on a Web link that appears to have been sent to them by someone on their buddy list. They receive a message along the lines of, "Hey, would it be okay if I upload this picture of you to my blog?" If the recipient clicks on the link, an executable file that looks like a JPEG will download into a Windows folder, according to researchers at security company FaceTime Communications Inc. The file can then execute a number of different attacks, said Chris Boyd, security research manager for FaceTime Security Labs and the researcher who discovered the worm. It can open up the email port on the PC and send out spam messages. It can also install a variant of the "hacker defender" rootkit, which is widely deployed and difficult to remove. One of the most dangerous aspects of the worm is that it can also connect to remote file upload sites, which Boyd believes the worm authors' use as sort of staging sites where they can continuously download new infections. Once a computer is infected, the program will propagate using the same instant messaging method. The worm is unique because the program seems to be able to contact a number of different sites around the globe randomly. FaceTime researchers had different results when running the same file. "Previously, where we've seen something similar to this attempted, if one file is pulled offline or removed by an ISP, the whole chain goes down," Boyd said. "But this one, if one file goes missing or gets pulled down, it will potentially make a call to another file. It has quite a random aspect to it."So far, he estimates that the botnet -- a group of similarly infected computers that are remotely controlled -- has 1,000 to 2,000 members. More computers may have been infected but not made part of the botnet. The best defense is for AIM users to be wary of clicking on links. If a user receives an unexpected link from a buddy, the user can always reply to ask if they have sent the link, to make sure it is legitimate. FaceTime has updated its virus protection software to prevent users from infection, and other antivirus vendors may do the same. AIM users that get infected can try to remove the worm but may have to wipe and reformat their drives to get rid of it.
566132
Anti-virus vendors have raised the threat level on a new Internet worm squirming through Web servers that are running unpatched versions of the popular phpBB Web forum software.
534160
A new variant of the MyDoom worm that exploits an unpatched flaw in Microsoftâs Internet Explorer browser has emerged to threaten small business and home users in particular, security experts warned this week.
561428
A lot of AIM and ICQ instant messaging users have likely never even heard of "Jabber" yet. But they'll probably be Jabbering away in the not too distant future, after the bugs get worked out by a new AOL/ICQ test launch.
682949
The newest version of the MyDoom worm now circulating suggests to security experts that the much-anticipated &quot;Zero Day attack&quot; may have arrived.
172429
Fast-moving pest exploits site, player holes to steal passwords.
542387
The sophisticated worm, known as W32.pipeline, is setting up a botnet and propagates when an AIM user clicks on a Web link apparently sent from someone in their buddy list.
225628
Virus writers have created a piece of malware that &#39;talks&#39; to victims. The Amus email worm uses Windows Speech Engine (which is built-in to Windows XP) to deliver a curious message to infected users.
76646
Blog: Various people hiding behind pseudonyms are fueling news about a supposed worm for Mac OS X.
218233
New worm first appears as an instant message from a familiar contact, asking users to upload a picture of themselves.
611270
A new version of the Santy worm appeared over the weekend and poses a broader threat than its ancestors. A new version of the Santy worm appeared over the weekend, and according to analysis done by some security
177209
Security experts have spotted the first attempts to create an Internet worm that propagates using instant messages and exploits a recently disclosed flaw in Microsoft software.