Mindjail worms way through IRC
A recent post on Bugtraq (27/06/03) introduced the world to a new worm currently slithering its way through IRC.
Mindjail is a new variant of Backdoor.SdBot code that once activated installs a backdoor into infected systems. IRC channels are scanned by bots seeking users, who are then spammed with the following messages:
1. "EEEEEEETHHHOOOM! MINDJAIL!! HE IS TRAPPED!! GET HIM OUT!"
2. "Ever heard of a thing called mindjail? Check it"
As of today, most Anti Virus scanners fail to detect either the exploit code or the backdoor Trojan. A detection and removal tool has been produced by Paolo Monti and is currently available for download
As ever, the best advice is to avoid clicking suspicious looking links in IRC (or anywhere else), check your Registry, and patch IE properly. ®