Careers & Certifications

04:17 PM
Connect Directly
RSS
E-Mail
50%
50%

Hackers Spam 'Happy New Year' Worm

Security experts warn against opening New Year-related messages to ward off this fast-moving worm, which disables Windows firewall and several security programs.

A rootkit-cloaked worm is being heavily spammed to users as an attachment to "Happy New Year!" messages, a security researcher warned Friday.

The new worm, dubbed "Tibs" by Kaspersky Lab but pegged as a "Nuwar" variant by Trend Micro, comes disguised as a file attachment named "postcard.exe," said Ken Dunham, director of VeriSign iDefense's rapid response team, in an e-mail. Users who launch the executable will infect their PCs.

With antivirus signature updates still thin and over 160 servers spamming the new worm, the threat is significant, added Dunham. "The period of greatest risk is through the New Year's holiday, when antivirus protection is the lowest for this new threat and users are most apt to click on a 'New Year's' related message," he said. "Everyone should be on guard for e-mails and other content potentially harboring malicious code during the holiday period."

On at least one network the worm is generating as many as five spammed messages a second, iDefense reported.

The security intelligence firm's research has identified more than a dozen pieces of malicious code -- including zombie-making bot Trojans -- installed by Tibs after it has gained a foothold on a PC. Two rootkits are also installed to mask the malware from antivirus scanners, and the worm also disables the Windows firewall, as well as several security programs, including F-Secure's BlackLight rootkit scanner. The worm spreads by spamming itself to addresses it steals from the user's files.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Cartoon
Slideshows
Audio Interviews
Archived Audio Interviews
Jeremy Schulman, founder of Schprockits, a network automation startup operating in stealth mode, joins us to explore whether networking professionals all need to learn programming in order to remain employed.
White Papers
Register for Network Computing Newsletters
Current Issue
Video
Twitter Feed