Hybrid Worm Wave Of The Future
2005-05-27 10:47:00
A new worm that hit users this week is a perfect example of the future of malicious code, said Panda Software Friday. And that future looks ominous.
The worm, dubbed "Eyeveg.d" by Panda (but Bugbear.b by Sophos, Lanieca.b by Symantec) is a sophisticated hybrid that spreads like a worm but conducts Trojan-style actions against the compromised computer.
Eyeveg.d infects a PC using an .exe file, a typical tactic of worms, and spreads itself to other machines by hijacking e-mail addresses and mailing itself to others.
The second, Trojan horse, component kicks in next, as Eyeveg.d loads a .dll file as a plug-in to the Internet Explorer browser. The .dll, essentially a keylogger, captures keystrokes whenever the computer''s user sends data to an SSL server, such as those used by banking and e-commerce sites.
"This is just another example of phishing, through which Eyeveg.d can gather data such as bank account numbers, passwords, or credit card numbers," said Panda.
The Trojan also includes a backdoor, through which the hacker can send new commands or install more malicious software on the system.
"This type of hybrid of two malware species is becoming more and more habitual, as malware creators look for increased capacities and versatility in their creations," concluded Panda.
|
|
Sun plugin gives MS Office users ODF support
Ubuntu Hardy beta released
IBM to invest in open source EnterpriseDB
Likewise opens Windows networks to Linux and Macs users
Oracle offers clustering for Linux
CrossOver Games adds firepower to Linux
Photoshop goes online, free
Sun plans to fully open source Java
Linux guru found guilty of murder
|