AIM worm



Strange AIM worm going around. It apparently includes an interesting combination of rootkits, a rootkit detector, spyware/adware, and a specialized bittorrent client. The machines can then be controlled through IRC. Source seems to be the Middle East…

IM hackers then control a global botnet where their infections can be tested and payloads are pushed. Facetime traced these hackers to the Middle East.
The same IM hackers sent movies by way of IRC and their own version of BitTorrent, installing it without consent. Now the IM hackers are back with more, nastier malware, Rootkit Revealer and adware from 180solutions/Zango.


According to the Sunbeltblog it the tease come-on for AIM is the following:

The worm lures victims through the following AOL Instant Messenger with the following messages:
“great picture :) http://www.picteurestrail.net/Mastermon/XXXXXX.JPG”, or

“not a right time to take a picture haa :-) http://www.picteurestrail.net/Mastermon/XXXXXX.JPG”

“not a right time to take a picture haa :-) http://www.pictrail.net/Matelord/XXXXXX.JPG”

“not a right time to take a picture haa :-) http://www.picstrailx.net/Mateslord/XXXXXX.JPG”

Be suspicious of links.

Related Posts

Blog Traffic Exchange Related Posts
  • Top 10 spyware tricks of 2005 You can tell we're in the last 10-12 days of the year when we start seeing all sorts of year end retrospectives, year's in review, countdowns of the top ___ of ___year ending___. Well, spyware has seen a banner year in many respects and Suzi at Spyware Confidential has a......
  • AIM worm in the wild There was an article in the last few days about Instant messengers being a tempting new vector for viral infections... Well.... Incidents.org has information on a new AIM worm seen in the wild. It doesn't travel via a security hole, but uses the good old standby of social engineering to......
  • Google indexing weirdness In looking at my Google Analytics info.... I checked on the Northcarolinagenealogy.net site's stats and found that it's really dropped since about Friday or Saturday from decent traffic to next to nothing. (20 visitors a day now.) The first thing I noticed was no google.com referrers.... So, I started looking......
Blog Traffic Exchange Related Websites
  • My Lessons on Buying a Car. This post was originally written at the start of 2009, but has been lost on my PC until now, so I thought I'd share with you now. My wife and I just bought a new minivan, and I thought I'd share some of the lessons I learned along the way.......
  • Brain Injuries and Lack of Empathy Damage to the frontal lobe can affect feelings of not only empathy but also of lack of compassion.  And in most cases there are few feelings of guilt as a result of their behavior.  This deficit can alter decisions that most likely would have been handled very differently pre-injury. My......
  • Market Characterization of Global Respiratory Therapeutics Market The Future of Respiratory Diseases Therapeutics - Market Forecasts to 2015, Competitive Benchmarking, Product Pipeline and Deals Analysis Summary “The Future of Respiratory Diseases Therapeutics - Market Forecasts to 2015, Competitive Benchmarking, Product Pipeline and Deals Analysis.” The report provides in-depth analysis of unmet needs, drivers and barriers that impact......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

One Response to “AIM worm”

  1. Spyware Informer Says:


    M Hackers Give Away Spyware and More…

    Chris Boyd (aka Paperghost) talks more about it on Vitalsecurity and explains that the worm not only installs a number of rootkits, but also a rootkit remover (the screenshot is from his blog). The said rootkit remover is called Rootkit Revealer. Thi…


Switch to our mobile site