New IM worm ... chat with the victim himself

For the first time, a worm automatically chat with users via IM programs, enticing them to click on a malicious link to attack the victim's computer.

For the first time, a worm automatically chat with users via IM programs, enticing them to click on a malicious link to attack the victim's computer.

Fortunately, this worm only attacks AOL's IM service.

New IM worm ... chat with the victim himself Picture 1

The warning has been issued by security firm IMlogic, the IM.Myspace04.AIM worm will automatically jump into your chat window with a "cool" nick, along with a link to download a file named "Clarissa17 .pif ".When users carelessly respond, perhaps ask "what is it?"or "is there a virus?", this worm will be grumpy to answer "Oh no, how the virus is."

Very innocent and without any doubt, users click on the link.Immediately, this malicious file enters the system, disables security software, installs a backdoor program and changes system files.Not only that, it began to attack all the nicknames present in the victim's chat list, with the same tricks and tricks.

All these actions have been programmed to happen silently.Messages that are sent deep into the victim are not known to be able to alert friends.

"This is the first case," said Andrew Burton, IMlogic's product manager.This worm does not spread too widely, but it seems like a hacker experiment, once "sharpening a knife" before fighting."In the near future, we will definitely witness some more" headaches ", and eventually will be an outbreak of these attacks."

At the same time, another worm is spreading on the Internet but in a more traditional way: disguising a Christmas card.Called Aimdes.E, this worm is also aimed at AOL IM users.It entices users to open the link "Greeting Cards Noel" and once activated, the worm will automatically install it into the system, open the back door of the computer and spread to the remaining contacts in the list. chat.

The advice given is that you should be very careful with all incoming links.If (seems to be) it was sent by a friend before opening it, you should check it again by asking the friend directly.

Thien Y