The Register®

Original URL: http://www.theregister.co.uk/2004/11/05/osama_email_worm/

Email worm poses as Osama videogram

Famus for 15 minutes

By John Leyden

Posted in Security, 5th November 2004 13:42 GMT

Free whitepaper – Hands on with Hyper-V 3.0 and virtual machine movement

Emails claiming to contain video clips of terrorist mastermind Osama bin Laden are likely to be example of a new computer worm.

The Famus-F [1] worm normally arrives in the form of a bilingual English and Spanish email, with the subject line "More terrorism this year". The message body states: "Last speech from Bin Laden. Please forwards this video to everybody." and includes a password - "cnn".

If executed, the worm attempts to forward itself to email addresses found on infected computers. It also drops a number of files onto the hard drive. Fortunately, Famus-F is not spreading very successfully. Even so, vigilance is advisable.

The worm is yet another example of virus writers using a topical subject to trick users into running malicious code. In July virus writers tried to trick [2] users into opening a Trojan horse on their PC by passing malicious code off as a "suicide photographs" of bin Laden. This wasn't particularly successful, but that didn't stop the repeated use of the ploy in attempts to spread the Hackarmy [3] Trojan in the last four months. ®

Related stories

Trojan poses as bin Laden suicide pics [4]
Schwarzenegger virus terminated [5]
Panto bin Laden in New York, New York outrage [6]