Please wait while the page is being loaded Skip this advertisement >
Saturday | 30 August, 2008
ARN
New worm lures users with 'breaking news'
A new e-mail worm spreads by baiting users with 'breaking news' on Michael Jackson or Pope John Paul II's death.
Scarlet Pruitt (IDG News Service) 29 June, 2005 09:10:10

Additional Resources
ARN Library

Newsletter Subscription

Sign up for our ARN newsletters!
The premier provider of daily news to the IT channel, covering business, technology, products, and services.
RSS Feeds

Internet users alarmed over news of Michael Jackson's death or dark conspiracies behind the demise of Pope John Paul II should perhaps just be worried that they received another new e-mail worm.

Researchers at security firm Sophos warned Tuesday of the spread of the Kedebe-F e-mail worm, which carries a variety of subject headers and messages touting breaking news. However, users who click on the attached file could have their security software and firewall disabled, according to Sophos.

Possible messages include "someone sent me this document which is stolen from a secret government body about John Paul's death." Other messages try to entice recipients into opening the attached file by claiming Michael Jackson has died, Osama bin Laden has been captured by US soldiers or the MyDoom e-mail worm author has been arrested by Microsoft, Sophos said.

Using supposed "breaking news" to persuade users to open a message and click on an attachment is a long -favored method among virus writers, according to Sophos Senior Technology Consultant Graham Cluley.

"This is a fairly common trick. It doesn't take Albert Einstein to think this one up," Cluley said.

Although the worm is currently slow-spreading Cluley flagged it as an example of the kinds of social-engineered threats that users should watch out for.

The worm spreads via e-mail or P-to-P (peer-to-peer) file sharing networks. It appears to be targeted at both news hounds and geeks, with mentions of the MyDoom worm, Cluley said. Also, it spreads on P-to-P networks by copying itself to the directory for sharing information on the server, purporting to be source code for the Sasser worm.

Users are advised to update their antivirus software against the threat.

Market Place

ARN Member Login

 
Panel Sessions
  • ARN Panel Sessions: Day 3

    The last of our panel sessions recorded live at CeBIT 2008. Today, the topic is storage. Data is growing at an enormous rate, so what does the future hold?

Play
ARN news
  • IFA: LG's newest TV includes Bluetooth

    Bluetooth will be installed in models in LG's PG7000-series plasma sets and LG7000-series LCD sets, which are due on sale across Europe before the end of September.

Play
Channel Watch
  • Brian's bloopers

    It takes a long time to produce an episode of Channel Watch. Maybe you'll understand why after watching this...

Play
Business Continuity & Disaster Recovery Zone

When an IT disaster occurs, how handy it would be to push a button and start again as if nothing had happened.
Discover and learn more about CA XOSoft today.
ARN Vendor Directory
ARN Library

How to Beef Up Your Sales Pipeline

Our economy may be heading towards a recession. Sales rates are dropping. Promotional campaigns are proving less effective than you would like. So how do you continue to grow your business and bring home the sales in such an environment? Download this white paper now to find the answers.

Sponsored Links