Originally published December 14 2005
Instant messaging worm linked to Middle Eastern group
by Mike Adams, the Health Ranger, NaturalNews Editor
According to a security firm, the new worm that spreads through AOL's instant messaging network has been linked to an unidentified group in the Middle East. The software may be able to steal Outlook Express email passwords and log keystrokes.
A recently discovered worm that spreads through America Online Inc.'s instant messaging network has been linked to additional malware sent by an unidentified group in the Middle East, a security firm said Thursday.
Sdbot.add includes a Lockx.exe rootkit that hides the worm in a computer.
Hackers can also use the rootkit to cloak their own malware.
FaceTime Security Labs, which identified the worm late last month, said it has found a rootkit-linked ster.exe file that contains six additional files that give the attacker the ability to upload, download, and monitor the infected host PC.
The software has been linked to a group in the Middle East and has the potential to steal Microsoft Outlook Express email passwords and log keystrokes.
The infected computers can also be used as a platform for launching attacks on Web sites or networks, FaceTime said.
The attackers have compromised multiple servers hosted by Internet service providers worldwide to distribute the malware payload, FaceTime said.
The research group is a division of security firm FaceTime Communications, based in Foster City, Calif.
All content posted on this site is commentary or opinion and is protected under Free Speech. Truth Publishing LLC takes sole responsibility for all content. Truth Publishing sells no hard products and earns no money from the recommendation of products. NaturalNews.com is presented for educational and commentary purposes only and should not be construed as professional advice from any licensed practitioner. Truth Publishing assumes no responsibility for the use or misuse of this material. For the full terms of usage of this material, visit www.NaturalNews.com/terms.shtml