Keith Moon
July 25th, 2005, 02:27 AM
Thursday, 21 July 2005
iTunes worm hits Windows
by Jonny Evans, Macworld.co.uk
Trend Micro sends out warning
Apple’s success with iTunes (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#) has finally attracted the attention of the virus (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#) writers, according to security firm Trend Micro (http://www.trendmicro.com/). A new worm (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#), WORM_OPANKI.Y, is circulating online. It poses as an iTunes file and is spread using AIM (AOL Instant Messenger (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#)). While it does not affect Mac users, it does attack most breeds of Windows.
The virus poses as a file named "iTunes.exe" in an attempt to trick users "into thinking that this worm is associated with a legitimate product," Trend Micro (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#) warned.
When activated the worm sends a message to all online contacts of an affected user, which reads, "this picture never gets old". Each message has a link to a URL where users download a file that appears to be a Jpeg.
At the same time, the software will begin to download spyware and pop-ups when activated. It also tracks internet sites infected users visit.
Trend Micro warned: "This worm has backdoor capabilities. It opens a random TCP port and connects to the IRC (Internet Relay Chat) server xyz.legi0n.net. Once connected, it joins the IRC channel fate, where it listens for commands from a remote malicious user. It then executes these commands locally on affected machines."
It's not a major threat and, according to the security firm it hasn’t yet spread too widely.
http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912
iTunes worm hits Windows
by Jonny Evans, Macworld.co.uk
Trend Micro sends out warning
Apple’s success with iTunes (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#) has finally attracted the attention of the virus (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#) writers, according to security firm Trend Micro (http://www.trendmicro.com/). A new worm (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#), WORM_OPANKI.Y, is circulating online. It poses as an iTunes file and is spread using AIM (AOL Instant Messenger (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#)). While it does not affect Mac users, it does attack most breeds of Windows.
The virus poses as a file named "iTunes.exe" in an attempt to trick users "into thinking that this worm is associated with a legitimate product," Trend Micro (http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912#) warned.
When activated the worm sends a message to all online contacts of an affected user, which reads, "this picture never gets old". Each message has a link to a URL where users download a file that appears to be a Jpeg.
At the same time, the software will begin to download spyware and pop-ups when activated. It also tracks internet sites infected users visit.
Trend Micro warned: "This worm has backdoor capabilities. It opens a random TCP port and connects to the IRC (Internet Relay Chat) server xyz.legi0n.net. Once connected, it joins the IRC channel fate, where it listens for commands from a remote malicious user. It then executes these commands locally on affected machines."
It's not a major threat and, according to the security firm it hasn’t yet spread too widely.
http://www.pcadvisor.co.uk/index.cfm?go=news.view&news=4912