New MSN Messenger Trojan Spreading Quickly

by ianivs | November 19, 2007 at 01:30 pm
1017 views | 20 Recommendations | 3 comments

Photos

Suspensions for alleged computer hacking

Suspensions for alleged computer hacking

see larger image

uploaded by XxDeMoNxX

If you use MSN Messenger, beware. A new trojan has already infected thousands of computers by sending what looks like picture files from one of your contacts. These files, when opened infect the computer with a bot that then logs into a IRC network to wait for further instructions.


It isn't known yet what the purpose of this bot network is.


The malware is being introduced by MSN Messenger files posing as pictures, mostly seeming to come from known acquaintances.



The infection vector—an IM program—isn't new. But the Trojan is the first that eSafe has tracked that has tried to scan for VNC (Virtual Network Computing) instances, likely in order to multiply the botnet's number of connections.



recommend This comment thread is now closed
liamssoft
liamssoft
flagged this story as Good Stuff

at 13:44 on November 19th, 2007

ianivs, Thanks for the Warning.... Good stuff.

ifindtrends
ifindtrends
flagged this story as Good Stuff

at 17:19 on November 22nd, 2007

Thanks for the Alert. Hackers have started attacking the social networking sites latley with the myspace hack and videos. Maybe we could start a tag to follow the latest virus/trojan news.

Good Stuff 

0
daevid hughes

good stuff hahaha r u guys and girls joking. so they warned you. but didnt tell you specifically which virus/trojan they are referring too. i have done research for hours now in order to tell my friend what to do about it. i have found limited imformation on the virus/trojan i am researching only two instances have i found info on the one i am looking for. one was from 2007 and the other only last month so this and according to my reasearch so far many others (since 2005) ahhh f*ck it i forgot my point other than dont say thank you for a warning you know little about.

This story was created over 3 months ago, the comment thread is now closed.

closeSign in to NowPublic

is reporting from