Kaspersky Lab identified a new type of Worm that spreads through Instant Messaging

Kaspersky Lab announces that it has identified a new family of malicious software worm. What distinguishes these worms is that they use many different languages and that can infect computers directly to users through a large number of platforms instant messaging, which is very unusual for this type of malware. The Kaspersky Lab experts have observed that the worms are widely used platforms Yahoo! Messenger, Skype, Paltalk Messenger, ICQ, Windows Live Messenger, Google Talk, and the platform XFirepou predominantly used by users of online gaming.



Four variants of this worm have been detected by Kaspersky Lab specialists today. The name «IM-Worm.Win32.Zeroll» has been given to this family of malicious programs. Once the worms are infiltrating a user's computer, look at the list of contacts is located on the messagingkai applications instant distraction. To infect a computer, the worms are using a link that supposedly leads to an interesting picture. In fact, the link leads to a malicious file. The spread is via instant messaging from computers that have already been raised.



The fact that this new family of worms can use multiple languages is something that sets it apart from other similar programs. Specifically, the worms of the family of IM-Worm.Win32.Zeroll using 13 different languages, including English, German, Spanish and Portuguese, to send messages to users from different countries. So far, most attacks have occurred in Mexico, Brazil, Peru and the U.S., there have been several incidents in Africa and India but also in countries of Europe - especially Spain.



Malware family IM-Worm.Win32.Zeroll can gain control of a computer without the user realizing it. Just invade the computer communicate with a remote command and control center. After receiving commands from the center channel through Internet Relay Chat (IRC), they download other malicious programs. It is interesting that this new type of worm is associated with various channels of IRC, depending on the country and each platform instant messaging. This means that the hacker has control of a network of infected computers can make a classification based on the country and the platform and to send different commands to computers. This feature is especially useful to criminals on the Internet for activities such as targeted attacks spam.



"It seems that the creators of this worm are at an early stage of the criminal activity. Currently infect as many computers can, so then hire "services" to other unscrupulous attacks on pay per install, spam, etc., "said Dmitry Bestuzhev, Regional Expert for Latin America of Kaspersky Lab.



Note that all solutions of Kaspersky Lab detected and successfully undermined the variations of this new family of worm.

1 in 4 computer worms spread out via usb stick

The technical director of PandaLabs, Luis Corrons, announced the findings of research on the spread of malware circulating at the moment. According to the survey, approximately 25% of threats at this time to action are designed so as to be transmitted by devices connected to a USB port. One of the most familiar worms that are transmitted via USB is Stuxnet. Until a few weeks ago, this worm-and-operated not only undisturbed, and operated a fundamental defect in the Windows management system shortcuts (shortcuts). Basically, the worm infects a computer simply when the unsuspecting user opens a file manager and just sees the contents of the file. The Stuxnet automatically copies itself to the hard disk, without requiring the execution of a file.
Of course, transmission of malware via USB is not a new phenomenon. The virus Conficker used routinely to USB sticks to broadcast throughout the course of 2008. A fully updated antivirus and a lot of attention from the user's side are the best defenses against the threats. These two and timely action by Microsoft every time you discovered a security hole in Windows ...