WORM_OPANKI.Y targets iTunes users
Trend Micro has detected a new IM-based worm, WORM_OPANKI.Y, which uses the file name ITUNES.EXE for its routines. The worm spreads via AOL Instant Messenger, one of the top three IM applications in the world, and exploits the popularity of the iTunes application for music downloads.
OPANKI.Y sends the message “this picture never gets old” to all online contacts of the affected user. The message it sends contains a link to a downloadable file which contains a JPG extension to appear credible. However, the downloaded file is instead saved as ITUNES.EXE in the user's system.
