Saturday, 23-February-2019 08:56
 
no comments in "Sci-Tech"
Sci-Tech
Tuesday, 19-September-2006
(vnunet)- - Security analysts have identified a new worm known as Win32.Pipeline that is propagating over AOL Instant Messenger.

Researchers believe that the ultimate goal of the worm is to create a sophisticated botnet that can be used for a range of malicious purposes.

FaceTime Security Labs said that the worm delivers an executable file disguised as a JPEG image.

The file calls out to various host computers that download a variety of other files including rootkits and Trojans that may further propagate the worm through the user's AIM Buddy List.

Once the user's PC is infected, it becomes part of a botnet and is under complete control of the hacker to use for a variety of purposes.

These could include relaying spam, performing distributed denial-of-service attacks or committing financial fraud against online advertisers.

Like many IM worms, Win32.Pipeline first appears as an instant message from a familiar contact, luring users into clicking on a link with a contextual phrase.

The IM message, which reads 'Hey would it okay if I upload this picture of you to my blog?', downloads a command file called image18.com, which is disguised as a JPEG.

Running the file results in csts.exe being created in the user's system32 folder, which is part of the Windows operating system.

"The emphasis for this latest worm is not so much on the files that are delivered to the users' computers, but the way these files are deposited onto the system," said Chris Boyd, director of malware research at FaceTime Security Labs.

"Previous IM attacks have tended to focus on the damage done by the files, with little thought on the method of delivery, save for the quickest way to get those files onto a PC.

"Here, the motivation for the bad guys seems to be in lining up as many 'install chains' as possible to insure a consistent pipeline that can be controlled by their rogue botnet."
More from "Sci-Tech"

Other titles:
Tuesday, 17-October-2017
The United Arab Emirates acknowledged on Tuesday that two of its pilots were killed when their military aggression plane crashed over Jawf province, a military official said

The official added that the aggressive crashed plane was an apache that was
Tuesday, 17-October-2017
Three citizens were killed and four others wounded in two Saudi air strikes hit Majza district of Saada province, an official said on Tuesday.

The strikes hit a citizen's car in al-Jamalah area in the district, the official added.
Tuesday, 17-October-2017
Artillery of the army and popular shelled a gathering of Saudi-paid mercenaries in al-Moqadra area in Serwah district of Marib province, a military official said on Tuesday.

Meanwhile, dozens of Saudi-paid mercenaries were killed and others injured in Wadi al-Theek in the district, the official added.
Monday, 16-October-2017
The army and popular forces carried out on Monday unique military operations in Taiz province.

A military official said that a number of Saudi-paid mercenaries were killed at the hands of the army and popular forces in al-Jazami Hill in al-Kadaha area in al-Ma'afer district.
Monday, 16-October-2017
A Saudi aggression fighter jet targeted a citizen's car driving in Fara area of Kutaf district in Saada province overnight, killing the driver and injuring his friend, a security official said on Monday.
Monday, 16-October-2017
The army artillery and popular committees launched a fierce attack on Saudi-paid mercenaries' sites in Jawf province, a military official said on Monday.

The attack destroyed a military vehicle belonging to the mercenaries and killed all on board in Sabran area in khab and shaaf district.
Sunday, 15-October-2017
Scores of Saudi enemy soldiers were killed and injured on Sunday when the army and popular forces repelled a Saudi military attempt to sneak into Shurfah site in the border province of Najran, a military official said.

The operation was accomplished successfully against the Saudi
Sunday, 15-October-2017
The army and popular committees have killed a total of 18 Saudi-paid mercenaries in sniper operations over the past hours in the central province of Marib, a military official said on Sunday.

Ten mercenaries were killed in Nehm district and eight others were killed in Serwah district, said the official.
Saturday, 14-October-2017
Saudi aggression warplanes have launched more than 49 airstrikes over the past hours on several residential areas across Yemen, a security official said on Sunday.
The airstrikes targeted the areas of Malahiz and Husama in Dhahir district, and areas Thuban, Masahif and Sdad in Bakim district of northern Saada province.
Thursday, 12-October-2017
The army and popular forces carried out an operation attack on Saudi-paid mercenaries' sites in al-Hawal area in Nehm district.

A local official said that the operation attack resulted in killing and injuring mercenaries, adding they also incurred heavy losses at their ranks

who we are     |    Advertising     |    contact us
All rights reserved © Almotamar Net, Developed by