12.22.2005

Santa Worm - Ho Ho Hooie

Loverly:

With the holidays upon us, the name of Santa Claus is being used for evil rather than good by worm developers, who have targeted major instant-messaging systems with a holiday-themed virus.

The IM.GiftCom.All worm has made an appearance on several messaging networks, including America Online, Microsoft MSN, and Yahoo.

The worm attempts to dupe you into believing that a friend has sent you a link to a harmless file. If you click on the file, you see an image of Santa. While viewing it, the worm attempts to install a rootkit on your system.

Rootkits are frequently used to circumvent security software and give an attacker remote control of a machine. Once the attacker is inside your system, the worm harvests your instant-message contact lists for subsequent infections.
I tell you, the worm that took my network down Thanksgiving week was a real peckerwood. Never saw a worm work that effectively.