Skip to main content

Viruses & Malware

New Mydoom virus is not a pretty picture

posted onAugust 18, 2004
by hitbsecnews

Security experts are warning internet users to update their antivirus systems to protect against yet another version of the Mydoom worm.

W32/Mydoom.s@MM, also known as Mydoom.s, has emerged as a new variant of the mass-mailing worm, and comes in the form of the .exe attachment, 'photos_arc.exe'.

McAfee's Avert antivirus team warned that it has received "well over 100 reports" of the virus within a three-hour span, mostly from Japan and Europe.

Latest MyDoom worm exploits Web site guestbooks

posted onAugust 17, 2004
by hitbsecnews

The worm that brought down Google strikes again, with a new variant that links to Web sites compromised by their use of standard scripts

A new variant of the MyDoom worm discovered on Tuesday downloads malware from an MP3-downloading site and a personal Web site, according to security experts, who claim that hackers have compromised these sites by exploiting scripting vulnerabilities in their guestbooks.

Latest Trojan designed to steal online banking details

posted onAugust 15, 2004
by hitbsecnews

An email Trojan designed to steal online banking details from UK internet users has been unleashed.

The National Hi-Tech Crime Unit (NHTCU) is warning that a number of people around the UK have reported receiving the email in the last few days, which also has the capability of spamming and soliciting other personal details.

The email tries to convince readers they have made an order for computing goods or web-hosting facilities. It is sent with a web link to sites in North America and China which pretend to hold further details on the transaction.

UK police issue 'vicious' Trojan alert

posted onAugust 15, 2004
by hitbsecnews

Britain's top cybercrime fighters have joined up with the banking industry today in warning of the latest attempt to defraud online banking customers. The attacks, in the form of 'Trojan horse' emails, have been spammed out to a number of email account holders randomly across the country. The emails contain links to malicious websites in North America and China. The UK's National Hi-Tech Crime Unit (NHTCU) is working with the Internet industry to have these sites shut down. At the time of writing three have been taken out of commission but others remain active.

Political rivals plant worm

posted onAugust 12, 2004
by hitbsecnews

AN AUSTRALIAN politician has come the raw prawn and alleged rivals planted a worm on his website.
Steven Ciobo, the Member for the Gold Coast electorate of Moncrieff has a nice bland site here, so imagine his disgust when he discovered that people who actually visited the place downloaded some kind of worm.

It is enough to give a bloke squatters in the outback. Steve seems to be convinced that one of his rivals cracked his site and put the worm there. He has called for the Australian Federal Police to investigate how the worm got onto his website.

Mosquito Trojan set to infect mobiles

posted onAugust 11, 2004
by hitbsecnews

Mobile phone users should beware of being bitten by Mosquito, a Trojan masquerading as a game but designed to send out premium-rate SMS messages without the user's consent.

One of the first examples of malicious software aimed at mobile phone users, the Trojan has been hidden in a pirated game that describes itself as Mosquito v2.0.

But while the mosquito-shooting game is being played, the Trojan makes the handset send out text messages at premium rates.

The Trojan can affect phones running the widely used Series 60 Symbian operating system.

New MyDoom revives call to catch culprit

posted onAugust 6, 2004
by hitbsecnews

A new variant of the MyDoom worm, described variously as MyDoom.Q or MyDoom.O, that uses Yahoo! People Search to find new email addresses has been discovered sparking fresh calls in the industry for information leading to the arrest of the worm's author.

Last week, a MyDoom variant pumped so many queries into Google that the search engine was unavailable or very slow for large periods of time. The same variant of MyDoom also succeeded in knocking a number of smaller search engines--including Altavista and Lycos--off the web completely.

Latest MyDoom attacks Yahoo people search

posted onAugust 4, 2004
by hitbsecnews

A new variant of the MyDoom worm, described variously as MyDoom.Q or MyDoom.O, was discovered on Tuesday that uses Yahoo's People Search to find new email addresses.

Last week, a MyDoom variant pumped so many queries into Google that the search engine was unavailable or very slow for large periods of time. The same variant of MyDoom also succeeded in knocking a number of smaller search engines -- including Lycos and Altavista -- off the Web completely.

Zindos worm relies on its pal MyDoom

posted onJuly 28, 2004
by hitbsecnews

The Zindos worm, which has launched a DDoS attack on Microsoft.com, seems to be written by the author of the MyDoom worm, as they share some intimate secrets. The latest variant of the MyDoom worm appears to form the first part of a two-pronged attack by preparing the path for a new type of worm that, in this case, is designed to assault Microsoft.com.

MyDoom first appeared in January 2004 and overnight became the worst worm ever. Within a month, different variants of the worm had knocked SCO's Web site offline and launched an attack on the Microsoft.com Web site.

MyDoom's day passes quickly

posted onJuly 28, 2004
by hitbsecnews

The latest variant of the MyDoom worm, which was discovered Monday, peaked after around 12 hours and has already started dying out, according to antivirus companies.
The new generation, known as both MyDoom.M and MyDoom.O, slammed four popular search engines Monday and clogged e-mail accounts around the world. Google, Yahoo, AltaVista and Lycos all slowed to a crawl, because once the worm infects a PC, it automatically performs Web searches on those search engines.