New IM worm chats with intended victims
By Joris Evers
Staff Writer, CNET News.com
Published: December 6, 2005, 5:43 PM PST
A new worm that targets users of America Online's AOL Instant Messenger is believed to be the first that actually chats with the intended victim to dupe the target into activating a malicious payload...According to IMlogic, the worm, dubbed IM.Myspace04.AIM, has arrived in instant messages that state: "lol thats cool" and included a URL to a malicious file "clarissa17.pif." When unsuspecting users have responded...asking if the attachment contained a virus, the worm has replied: "lol no its not its a virus"...
The malicious file disables security software, installs a backdoor and tweaks system files...Then it starts sending itself to contacts on the victim's buddy list.