Vindictive Valentine Virii On The Loose

Feb 13, 2008
19,430
0
0
Vindictive Valentine Virii On The Loose


Valentine's Day is always a fresh roll call for people too eager to open that mail from the cute little red-haired girl [http://en.wikipedia.org/wiki/Little_Red-Haired_Girl], a fact virus writers know only too well.

Mcafee [http://www.mcafee.com/uk/] is warning against a possible virus epidemic as 1 in 40 spam emails are found to be carrying virii or malware, under the innocuous "Valentine."

Many reports are already coming in of an attempt to push the Waledac Trojan [http://www.f-secure.com/v-descs/trojan_w32_waledac_gen.shtml], a virus built on the "success" [http://www.pcadvisor.co.uk/news/index.cfm?newsid=8988] of the Storm Trojan [http://en.wikipedia.org/wiki/Storm_Worm].

When the "Storm" is opened, it installs a wincom32 service and fires out random emails from the infected computer with attached executable files. The unwitting receiver may receive "withlove.exe" from their loved one, and with one click, the infection starts again. It is also thought to help download extra virii to keep it hidden from view. As of January 22, 2007, the Storm Worm accounted for 8% of all malware infections globally.

Waledac performs all of Storm's tricks, but it also listens for commands from its main server, allowing it to update itself in a similar way to anti-virus programs.

At the moment, Mcafee has said that the virus emails themselves have very gooey subject lines ("Deepest Love") and usually contain a heart graphic, followed by a link to the malware site.

So, when presented with a "Wuv" email, take time to think. It may be your hard-drive as well as your heart that gets broken.

Source: The Register [http://www.theregister.co.uk/2009/02/09/valentine_trojan_spam/]
(Image) [http://www.flickr.com/photos/sis/98174687/]

Permalink