Wormy War Intelligence Infects PCs
Ganda.A worm tries to use the public's interest in the pending invasion of Iraq to trick users into opening a malicious file.Virus and worm writers often use social engineering tactics to lure victims: promises of lurid celebrity photos, cash prizes, and even love letters. This week, at least one virus writer decided to tap into the public's interest in information regarding the pending U.S. invasion of Iraq.
More Insights
White Papers
- Mobile BI: Actionable Intelligence for the Agile Enterprise
- How To Regain IT Control In An Increasingly Mobile World - by BlackBerry
Reports
More >>Webcasts
- Maximize ROI with Database Consolidation onto Private Clouds
- Server Virtualization Gets Relief From Tivoli Storage Manager for Virtual Environments
The worm, commonly called Ganda.A, uses about 10 different subject lines and E-mail messages to trick users into opening the malicious file. According to antivirus firm Sophos, these include several that discuss President Bush and Iraq, including:
Subject: Spy pics.Message: Here's the screensaver i sic told you about. It contains pictures taken by one of the US spy satellites during one of it's sic missions over iraqsic. If you want more of these pic's sic you know where you can find me. Bye!
Subject: G. W Bush animation Message: Here's the animation that the FBI wants to stop. Seems like the feds are trying to put an end to peoples sic right to say what they think of the US administration. Have fun!
Security experts say they won't be surprised to see more worms and viruses surface that prey on widespread interest in the war.
According to Internet security firm Symantec Corp., Ganda.A is a mass-mailer worm that sends itself to E-mail addresses found on the hard drive of an infected system. Ganda.A also contains its own E-mail (SMTP) engine. The worm also attempts to disable various security applications.
The worm writer, who calls himself "Uncle Roger" in Hornsand, Sweden, says he wrote the virus because he's being discriminated against. "I am being discriminated by the Swedish school system. This is a response to eight long years of discrimination," is a message inserted into the worm.
Related Reading
| To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy. | |
|
|
T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting! |
Subscribe to RSSResource Links
This Week's Issue
Technology Whitepapers
- Mobile BI: Actionable Intelligence for the Agile Enterprise
- Creating the Enterprise-Class Tablet Environment - by Yankee Group
- How To Regain IT Control In An Increasingly Mobile World - by BlackBerry
- Red Alert: Why Tablet Security Matters - by BlackBerry
- New Visual and Wizard-Driven Paradigms for Exploring Data and Developing Analytic Workflows












