Hackers Spam 'Happy New Year' Worm
Security experts warn against opening New Year-related messages to ward off this fast-moving worm, which disables Windows firewall and several security programs.
December 29, 2006
![Network Computing logo Network Computing logo](https://eu-images.contentstack.com/v3/assets/bltde8121fc52c5c8f3/blt3f3d0318f746b1c2/65a530e4187606040a1d8b8c/placeholder.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
A rootkit-cloaked worm is being heavily spammed to users as an attachment to "Happy New Year!" messages, a security researcher warned Friday.
The new worm, dubbed "Tibs" by Kaspersky Lab but pegged as a "Nuwar" variant by Trend Micro, comes disguised as a file attachment named "postcard.exe," said Ken Dunham, director of VeriSign iDefense's rapid response team, in an e-mail. Users who launch the executable will infect their PCs.
With antivirus signature updates still thin and over 160 servers spamming the new worm, the threat is significant, added Dunham. "The period of greatest risk is through the New Year's holiday, when antivirus protection is the lowest for this new threat and users are most apt to click on a 'New Year's' related message," he said. "Everyone should be on guard for e-mails and other content potentially harboring malicious code during the holiday period."
On at least one network the worm is generating as many as five spammed messages a second, iDefense reported.
The security intelligence firm's research has identified more than a dozen pieces of malicious code -- including zombie-making bot Trojans -- installed by Tibs after it has gained a foothold on a PC. Two rootkits are also installed to mask the malware from antivirus scanners, and the worm also disables the Windows firewall, as well as several security programs, including F-Secure's BlackLight rootkit scanner. The worm spreads by spamming itself to addresses it steals from the user's files."This is a classic iceberg threat," said Dunham, "where multiple codes are installed and then protected with rootkit technology."
You May Also Like
Maximizing cloud potential: Building and operating an effective Cloud Center of Excellence (CCoE)
September 10, 2024Radical Automation of ITSM
September 19, 2024Maximizing Manufacturing Efficiency with Real-Time Production Monitoring
September 25, 2024