Santa delivers more Christmas malware
Trojan horse MerryX.A is spreading via e-mail
December 23, 2005 12:00 PM ETIDG News Service -
PC users are being spoiled rotten this year: another piece of malware purporting to be a message from Santa is delivering surprise gifts over the Internet disguised in an electronic greetings card.
The Trojan horse "MerryX.A" is delivered in an e-mail that encourages the recipient to open an attached "animation." While the animation of Santa Claus delivering presents plays, a piece of malware hiding behind the name "SQLServer.exe" is installed on PCs running Windows, according to security staff at Panda Software SL's PandaLabs.
The software transmits information about the infected computer to a remote server, and then attempts to download files, which could include other malware, Panda said.
Earlier this week, security researchers identified an instant-messaging worm, IM.GiftCom.All (See "Santa Claus worm strikes IM clients"). Once it has infected a computer, the worm searches the contact databases of installed IM applications, and sends messages to the contacts it finds, encouraging them to visit a Web site. If the recipients click on the link, the Web site attempts to download another piece of malware to infect their PCs, which in turn spread the message further.
The end-of-year holidays provide plenty of opportunities for malware writers to hone their social-engineering skills since Internet users are unsurprised to receive brief messages with a seasonal theme from long-lost friends or distant business contacts.
This time last year, someone modified the Zafi e-mail worm to spread itself in a message entitled "Merry Christmas."
As at any other time of year, security researchers advise users that the best defense is to check out unsolicited attachments or Web links with the purported sender before opening or clicking on them.
Reprinted with permission from
Story copyright 2009 International Data Group. All rights reserved.
Security
Additional Resources



White Papers & Webcasts
Death to PST Files
Download Now
The Tangled Web: Silent Threats & Invisible Enemies
Download Now
Tape Killed the IT Guy
Watch Now
Forrester Consulting Mobility Study: Taking Control of Enterprise Mobile Device Diversity
Download Now
BRM: What You Can Do To Reduce Risk In Challenging Times
Watch this webcast now!
What IT Must Do to Support Employee-Owned BlackBerry, iPhone and Android Mobile Devices
Download Now
Web 2.0, Social Media and the Dark Web - A Web Criminals Paradise?
In this discussion, learn about the challenges of protecting your users from the potentially unsafe content hidden in the "Dark Web".
eGuide: Enterprise Security
Smart Security Strategies for 2010. Read now!
Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...

