Please wait while the page is being loaded Skip this advertisement >
Monday | 8 September, 2008
ARN
New Mytob worm poses as IT administrator
New Mytob worm variant could allow hackers to remotely access an infected machine, researchers warn.
Scarlet Pruitt (IDG News Service) 02 June, 2005 08:24:24

Another variant of the Mytob worm began wiggling its way into inboxes this week, enticing recipients to open an e-mail attachment that could allow a remote hacker to access and perform commands on an infected machine.

The variant, dubbed "Mytob.bi" by some security researchers, scans the hard drive of an infected machine and sends copies of itself to e-mail addresses it finds in the Windows Address Book, antivirus firm Trend Micro said Tuesday. The worm poses as a message from an IT administrator, warning recipients that their e-mail account is about to be suspended, Trend Micro said.

Possible subject headers for the worm include "*IMPORTANT* Please Validate Your Email Account" and "Notice: **Last Warning**."

The latest variant is the fourth iteration of the Mytob family of worms that were first detected in late February, Trend Micro said. It has backdoor capabilities and can open a random port, allowing a hacker to remotely access an infected machine.

The variant also prevents the infected machine from accessing several antivirus and security Web sites by redirecting the connection to a local machine, the security firm added.

While prevalence of the worm is still low, the damage potential is high, Trend Micro said. U.K. antivirus company Sophos PLC also rated the worm as a concern, due to the severe damage it could cause.

Researchers speculated that the Mytob worm family is popular with hackers because its code base is relatively easy to manipulate to create a new variant. Another version, Mytob.ar, was detected earlier this week, containing added spyware and adware elements.

Future Mytob variants could take advantage of the .ar version to reap monetary benefits from spyware, Trend Micro warned.

Internet users are advised to update their antivirus software to protect themselves from the new threats.

ARN Directory | Distributors relevant to this article
ARN Directory | Vendors relevant to this article
Market Place

ARN Member Login

 
Panel Sessions
  • ARN Panel Sessions: Day 3

    The last of our panel sessions recorded live at CeBIT 2008. Today, the topic is storage. Data is growing at an enormous rate, so what does the future hold?

Play
ARN news
  • Weekly Tech News Update: 8th September, 2008

    We're back again at the IFA consumer electronics show in Berlin where a virtual mirror helps you see the latest fashions, Samsung introduces a laptop that's lighter than air, and a prototype LCD TV is the thinnest on the show floor.

Play
Channel Watch
  • Brian's bloopers

    It takes a long time to produce an episode of Channel Watch. Maybe you'll understand why after watching this...

Play
Business Continuity & Disaster Recovery Zone

When an IT disaster occurs, how handy it would be to push a button and start again as if nothing had happened.
Discover and learn more about CA XOSoft today.
ARN Vendor Directory
ARN Library

NAB works with Avanade® to leverage Microsoft® Windows Server® 2008 for its branch offices

In 2007, Avanade helped the National Australia Bank use Windows Server 2008 to simplify deployment, maximise the efficiency of their low-bandwidth wide area network and consolidate its IT infrastructure.

Sponsored Links