Hackers Spam 'Happy New Year' Worm - InformationWeek
IoT
IoT
Business & Finance
News
12/29/2006
11:17 AM
50%
50%

Hackers Spam 'Happy New Year' Worm

Security experts warn against opening New Year-related messages to ward off this fast-moving worm, which disables Windows firewall and several security programs.

A rootkit-cloaked worm is being heavily spammed to users as an attachment to "Happy New Year!" messages, a security researcher warned Friday.

The new worm, dubbed "Tibs" by Kaspersky Lab but pegged as a "Nuwar" variant by Trend Micro, comes disguised as a file attachment named "postcard.exe," said Ken Dunham, director of VeriSign iDefense's rapid response team, in an e-mail. Users who launch the executable will infect their PCs.

With antivirus signature updates still thin and over 160 servers spamming the new worm, the threat is significant, added Dunham. "The period of greatest risk is through the New Year's holiday, when antivirus protection is the lowest for this new threat and users are most apt to click on a 'New Year's' related message," he said. "Everyone should be on guard for e-mails and other content potentially harboring malicious code during the holiday period."

On at least one network the worm is generating as many as five spammed messages a second, iDefense reported.

The security intelligence firm's research has identified more than a dozen pieces of malicious code -- including zombie-making bot Trojans -- installed by Tibs after it has gained a foothold on a PC. Two rootkits are also installed to mask the malware from antivirus scanners, and the worm also disables the Windows firewall, as well as several security programs, including F-Secure's BlackLight rootkit scanner. The worm spreads by spamming itself to addresses it steals from the user's files.

"This is a classic iceberg threat," said Dunham, "where multiple codes are installed and then protected with rootkit technology."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
Digital Transformation Myths & Truths
Transformation is on every IT organization's to-do list, but effectively transforming IT means a major shift in technology as well as business models and culture. In this IT Trend Report, we examine some of the misconceptions of digital transformation and look at steps you can take to succeed technically and culturally.
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll