PC Review

Closed Thread
Thread Tools Rate Thread

Polyglot worm spreads through MSN

Captain Crunchie, Retired
muckshifter's Avatar
Join Date: Mar 2002
Location: In a Hovel
Posts: 22,466
      25th Jan 2008
Worm changes language to target wide audience.

A new worm has been discovered that spreads through MSN Messenger. Once active, the worm opens random TCP ports to connect to an IRC server and then uses this connection to open a backdoor on the affected machine, allowing an attacker to issue commands locally.

The worm, which researchers at Trend Micro have named WORM_IRCBOT.SN, spreads by sending MSN users a link to a malicious site that downloads a copy of worm. The link is sent with messages that suggest the website contains pictures, either of the sender or of the recipient - for example "do I look dumb in this picture? I want to put it on myspace".

Interestingly, the messages used change depending on the language settings of the operating system, something which will certainly help the malware to spread more easily.

More can be found at Trend Micro here.

Closed Thread

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
[Update] Polyglot 3000 v2.0 (automatic language identifier) Captain Video Freeware 1 8th Apr 2006 12:47 PM
Signature spreads when replying of forwarding an email =?Utf-8?B?TW9vc2UgSG9ja2V5?= Microsoft Outlook Discussion 0 12th Apr 2005 06:55 PM
Applying a stile spreads to preceding page break. Why? =?Utf-8?B?Q2hlbWEgQg==?= Microsoft Word Document Management 1 1st Mar 2005 02:40 PM
New Worm Spreads Via MSN Messenger jafar Anti-Virus 5 5th Jan 2004 03:59 PM
Leaky capacitors shorting circuits; problem spreads muckshifter News Editions 3 30th Oct 2002 08:22 AM




All times are GMT +1. The time now is 10:14 PM.