Skip to main content

Viruses & Malware

Security firm probes reports of car viruses

posted onJanuary 27, 2005
by hitbsecnews

Antivirus companies are researching reports that computer viruses have attacked the onboard computers of cars.

Kaspersky Labs was contacted last weekend by a user asking how to disinfect the onboard computers of several Lexus cars -- the LX470, LS430 and Landcruiser 100. The user said that the infection occurred via a mobile phone.

New Symbian Virus Makes Mobiles Useless

posted onJanuary 22, 2005
by hitbsecnews

SimWorks is reporting a brand new virus that can severely disable a Symbian Phone to the point where it is unusable. Gavno.a is spread under the file-name patch.sis and masquerades as a patch for Symbian OS phones.

Gavno.a cripples a phone by using a malformed file to crash an internal Symbian process. This file can cause enough damage to a Symbian phone that it can no longer be used to make phone calls and may never be able to fully boot-up again.

Worm poses as CNN update

posted onJanuary 21, 2005
by hitbsecnews

A NEW computer worm is spreading via an email that poses as a news update from US news service CNN.

The email lifts its subject line, content and message from CNN's website, giving it the appearance of a genuine news update. Both the subject line and virus attachment change to reflect the top headline on CNN's website.

If opened, the attachment installs the Crowt-A worm on the user's machine.

The worm acts as a keystroke logger, recording whatever the user types and forwarding it to a remote location via the internet.

MSN Messenger mounted by fresh worm

posted onJanuary 20, 2005
by hitbsecnews

F-SECURE said there's a new worm in the wild which spreads itself using MSN Messenger.

The worm - called Bropia.A - disseminates itself by files claiming to be funny or lewd pictures with filenames such as love_me.pif, drunk_lol.pif and the like.

F-Secure said that contacts are harvested from client machines by snooping on MSN windows using Windows hooks.

The worm also throws backdoor software, a variant of Rbot, on infected machines. This copies itself as LEXPLORE.EXE

Man arrested over webcam spy Trojan

posted onJanuary 20, 2005
by hitbsecnews

A Madrid man has been arrested on charges of writing a malicious Trojan designed to steal confidential banking information from web users and take secret video recordings through their webcams.

According to the Spanish police, the 37 year-old suspect was found at his apartment spying on people through their webcams. The Trojan was engineered to spread via peer-to-peer networks.

It is said to have allowed the hacker to steal confidential information such as bank passwords, personal documents and pictures, as well as activate victims' webcams whenever he wished.

Cellery worm plays Tetris as it spreads

posted onJanuary 13, 2005
by hitbsecnews

Antivirus companies have discovered a worm, dubbed Cellery-A, that poses as an interactive version of Russian computer game Tetris at the same time as spreading across networks.

After the virus has been activated by opening the game, the Cellery worm displays a message saying "Chancellery" and changes Windows settings allowing it to automatically run on the operating system.

While the game is running, the worm plays a MIDI music tune, but also searches for other networked computers to infect.

Bawdy holiday worm preys on prurience

posted onJanuary 12, 2005
by hitbsecnews

Antivirus software maker Sophos identified a new worm on Tuesday that is being hidden in an e-mail attachment that includes a nude photo.

The virus, dubbed by Sophos as Wurmark-D worm (or W32/Wurmark-D) is being distributed via a mass e-mail campaign which offers a New Year's message in the form of an attached photograph of naked bodies. Labeled as an "amusing file," the attachment carries the destructive worm along with a graphic image of naked men and women whose bodies have been aligned to form the words "Happy New Year."

Malicious Trojan infects Windows Media Player

posted onJanuary 12, 2005
by hitbsecnews

Security experts have intercepted two malicious Trojans hidden in video files that download and install spyware, diallers and computer viruses when played in Microsoft Windows Media player.

PandaLabs warned that Trj/WmvDownloader.A and Trj/WmvDownloader.B, are spreading through P2P networks hidden in video files. These Trojans take advantage of technology incorporated in Microsoft Windows Media player called Windows Media Digital Rights Management (DRM), designed to protect the intellectual property rights of multimedia content.