Bagles, More Bagles and Osama?
Well what a week it has been, busy and interesting to boot!
I hear you ask “what’s the fuss with the new Bagles, what is so special about them?”, and a good question it is to. Well you asked so here’s the answer…..
It is believed that unlike most other malware, the Bagles (it is believed) are written by professional programmers, probably in the pay of spammers. All of the ones listed below got to a Medium alert stage this week.
More details on Bagle.ai can be found here
More details on Bagle.ag can be found here
More details on Bagle.af can be found here
As I write this we have now got up to Bagle.ak…it does seem that the Bagle Boys have nothing better to do!
Osama Hanged - NOT!
Just another case of ’social-engineering’ to try and get YOU to download and install a backdoor program.
The messages which are being posted to Usenet (NNTP) try to get potential victims to visit a website where a file can be downloaded, claiming it contains photographs of Osama hung, when it really contains a Trojan known as ‘Hackarmy’. Hackarmy gives malware writers control over an infected system.
Well, I suppose it makes a change from using porn to spread their malware….
More details can be found here
UPDATE: Well, looks like Arnie (I’ll Be Back) Schwarzenegger has also been used to try and tempt users to download and run this backdoor/trojan. The NNTP postings claimed that Arnie had commited suicide…
Here’s the posting, without the link to the infected file on the website:
Early this morning Arnold Schwarzenegger was found hanging by his neck from the large oak tree in his Californian garden. In a suicide note found at the scene he tells of his sordid sex life and lack of will to live. A copy of the suicide note which was found by journalists has been included here
Virus Humour: Arnold Schwarzenegger virus : Terminates and stays resident. It’ll be back.
Please note that this blog has now moved to my own hosted domain here: http://momusings.com/momusings/.
A full RSS/ATOM feed can be found there.
All the data up to the end of December 2006 will be left here, however all postings from the 1st of January 2007 onwards will only be available at this blogs new home.
ALL future postings will only be available at the new site.
