AIM users targeted again by IM worm, rootkit and adware


Hot off the press another IM worm is making the rounds, targeting AIM users and leaving a nasty payload of rootkits, trojans and adware including 180solutions and Zango.

Research experts at FaceTime Security Labs(TM), the threat research division of FaceTime Communications, identified and reported a new threat today affecting AOL Instant Messenger (AIM) applications. The new worm targets PC hosts infected with lockx.exe or palsp.exe and utilizes IRC enabled malware to connect the host to a server for further infection through a series of commands. One of the commands has the ability to control the AIM client on the infected host and send a message containing links to the AIM buddy list. When recipients click on the link they become infected with new variants of the IRC enabled malware along with an installation executable "creame.exe" which delivers multiple adware payloads including Zango and 180 solutions.
AIM users targeted again by IM worm, rootkit and adware | Spyware Confidential | ZDNet.com

Linked by shanmuga Saturday, 7th January 2006 2:50AM