Brandon Posted December 5, 2005 Report Share Posted December 5, 2005 Malware authors just opened their own holiday season. We received couple of reports of a new AIM worm spreading.The worm is simple and doesn't exploit any vulnerability; instead it relies on social engineering.The user will receive the following AIM message:"This AIM user has sent you a Greetings Card, to open it visit: http://greetings.aol.com/index.pd?source=c..._card.COM"Instead of going to the AOLs site, this link actually points to a different site (http://<REMOVED>.<REMOVED>.134.156/My_Christmas_Card.COM) from which the user will download the worm.This file is a SDBot variant and at the moment the most popular AV programs detect it generically.MoreInfo Quote Link to post Share on other sites
blim Posted December 5, 2005 Report Share Posted December 5, 2005 Thank you, Brandon. Both kids use AIM (unfortunately!) Emailed the info to them AND taped a note on the monitor! Liz Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.