Versatile worm infects IM clients

A new type of malware speaks many tongues, as it crawls around instant messaging services.

Computer worm

Kaspersky Lab has found a new breed of computer worm that spreads through instant messaging (IM) clients. These include Yahoo Messenger, Skype, Paltalk Messenger, ICQ, Windows Live Messenger, Google Talk and the XFire client used by online gamers.

The research team have found four variants which affect Windows systems. When one of these worms, generically named IM-Worm.Win32.Zeroll, infects a client, it searches for the contact list and sends itself in disguise to all the addressees. The recipient sees a message from the infected machine with a link to an image which turns out to be a malicious file.

Advertisement - Article continues below

A distinctive feature of the worm is it can send a message in one of 13 different languages to fool the recipient. Though the languages include English and German, Kaspersky has found it to be mainly active in countries where Spanish or Portuguese is spoken: Mexico, Brazil, Peru and the US.

The team also noted that it now appeared to be spreading to Africa, India and Europe, especially Spain.

Each worm acts as a backdoor and contacts a command and control centre. A hacker can then orchestrate the attack by classifying all of the infected systems according to country and IM client. This determines which commands should be sent and indicates the local language, which could be useful for distributing targeted spam.

Advertisement
Advertisement - Article continues below

Kaspersky claimed the hackers were creating a malware asset.

"They are infecting as many machines as they can in order to get good offers from other crooks for such things as pay per install, spam and so on," said Dmitry Bestuzhev, Kaspersky Lab's regional expert for Latin America.

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement

Recommended

Visit/security/ransomware/356292/university-of-california-gets-fleeced-by-hackers-for-114-million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020
Visit/security/cyber-security/356289/australia-announces-135b-investment-in-cybersecurity
cyber security

Australia announces $1.35 billion investment in cyber security

30 Jun 2020
Visit/cloud/cloud-security/356288/csa-and-issa-form-cybersecurity-partnership
cloud security

CSA and ISSA form cyber security partnership

30 Jun 2020
Visit/business/policy-legislation/356215/senators-propose-a-bill-aimed-at-ending-warrant-proof-encryption
Policy & legislation

Senators propose a bill aimed at ending warrant-proof encryption

24 Jun 2020

Most Popular

Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/cloud/356260/the-road-to-recovery
Sponsored

The road to recovery

30 Jun 2020
Visit/business-strategy/it-infrastructure/356258/the-growing-case-for-it-flexibility
Sponsored

The growing case for IT flexibility

30 Jun 2020