Alert Issued Over Bropia Carrier Worm
By Iain Thomson
VNUNet.com
02/03/05 2:57 PM PT
The Spybot worm is particularly damaging, Secunia warned. It seeks out Windows identity keys and certain application activation codes and feeds the information to the sender via Internet Relay Chat (IRC). The Bropia worm arrives in a file about 184 KB in size. It affects Windows 95, 98, ME, NT, 2000 and XP.
Danish security watchdog Secunia has issued a "medium" alert over the newly discovered Bropia worm, warning that it is spreading fast via MSN Messenger.
The malicious code, which arrives as a .pif file, acts as a carrier dropping a variant of the Spybot worm onto compromised PCs . This then acts as a Trojan and tries to harvest passwords from the computer before sending itself out again via Messenger.
Fooling Users
"Many corporations have been blocking the use of instant messaging programs for employee productivity reasons, and may now have good cause to do so for security reasons as well," said Joe Hartmann, senior virus researcher at antivirus company Trend Micro (Nasdaq: TMIC) .
"With the popularity of instant messaging, it may be the home users who are most at risk. This kind of worm uses humor to make people forget that they are being infected, and backdoors are being opened into their systems."
Stealing Keys
The Spybot worm is particularly damaging, Secunia warned. It seeks out Windows identity keys and certain application activation codes and feeds the information to the sender via Internet Relay Chat (IRC).
The Bropia worm arrives in a file about 184 KB in size. It affects Windows 95, 98, ME, NT, 2000 and XP.
© 2005 VNU Business Online Limited (UK). All rights reserved.
© 2005 ECT News Network. All rights reserved.
By Iain Thomson
VNUNet.com
02/03/05 2:57 PM PT
The Spybot worm is particularly damaging, Secunia warned. It seeks out Windows identity keys and certain application activation codes and feeds the information to the sender via Internet Relay Chat (IRC). The Bropia worm arrives in a file about 184 KB in size. It affects Windows 95, 98, ME, NT, 2000 and XP.
Danish security watchdog Secunia has issued a "medium" alert over the newly discovered Bropia worm, warning that it is spreading fast via MSN Messenger.
The malicious code, which arrives as a .pif file, acts as a carrier dropping a variant of the Spybot worm onto compromised PCs . This then acts as a Trojan and tries to harvest passwords from the computer before sending itself out again via Messenger.
Fooling Users
"Many corporations have been blocking the use of instant messaging programs for employee productivity reasons, and may now have good cause to do so for security reasons as well," said Joe Hartmann, senior virus researcher at antivirus company Trend Micro (Nasdaq: TMIC) .
"With the popularity of instant messaging, it may be the home users who are most at risk. This kind of worm uses humor to make people forget that they are being infected, and backdoors are being opened into their systems."
Stealing Keys
The Spybot worm is particularly damaging, Secunia warned. It seeks out Windows identity keys and certain application activation codes and feeds the information to the sender via Internet Relay Chat (IRC).
The Bropia worm arrives in a file about 184 KB in size. It affects Windows 95, 98, ME, NT, 2000 and XP.
© 2005 VNU Business Online Limited (UK). All rights reserved.
© 2005 ECT News Network. All rights reserved.
