Wormy War Intelligence Infects PCs

Ganda.A worm tries to use the public's interest in the pending invasion of Iraq to trick users into opening a malicious file.

Virus and worm writers often use social engineering tactics to lure victims: promises of lurid celebrity photos, cash prizes, and even love letters. This week, at least one virus writer decided to tap into the public's interest in information regarding the pending U.S. invasion of Iraq.


More Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

The worm, commonly called Ganda.A, uses about 10 different subject lines and E-mail messages to trick users into opening the malicious file. According to antivirus firm Sophos, these include several that discuss President Bush and Iraq, including:

Subject: Spy pics.Message: Here's the screensaver i sic told you about. It contains pictures taken by one of the US spy satellites during one of it's sic missions over iraqsic. If you want more of these pic's sic you know where you can find me. Bye!

Subject: G. W Bush animation Message: Here's the animation that the FBI wants to stop. Seems like the feds are trying to put an end to peoples sic right to say what they think of the US administration. Have fun!

Security experts say they won't be surprised to see more worms and viruses surface that prey on widespread interest in the war.

According to Internet security firm Symantec Corp., Ganda.A is a mass-mailer worm that sends itself to E-mail addresses found on the hard drive of an infected system. Ganda.A also contains its own E-mail (SMTP) engine. The worm also attempts to disable various security applications.

The worm writer, who calls himself "Uncle Roger" in Hornsand, Sweden, says he wrote the virus because he's being discriminated against. "I am being discriminated by the Swedish school system. This is a response to eight long years of discrimination," is a message inserted into the worm.


Related Reading




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
T-Shirt Giveaway T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting!
Subscribe to RSS

Resource Links