Feeds

Botnet creators AIM high

Pipeline

5 things you didn’t know about cloud backup

A new worm spreading over AOL Instant Messenger seeks to built a botnet of zombie Windows PCs. The Pipeline worm packs an executable file disguised as a JPEG, which if executed, tries to download other strains of malware rootkits and Trojans. Pipeline uses the AIM Buddy List on infected computers to target other prospective marks.

Like many instant messaging worms, Pipeline appears as an instant message from a familiar contact, luring users into visiting malware-infested websites. The IM message “hey would it okay if i upload this picture of you to my blog?” downloads a hostile file called image18.com, disguised as a JPEG. Running the file results in infection.

Once compromised, infected PCs join a botnet under the control of hackers, who may use it for malign purposes include relaying spam, performing distributed denial-of-service (DDoS) attacks or committing click fraud. Hackers can also gain access to personal data stored on infected PCs.

The botnet established by Pipeline is sophisticated, according to researchers with IM security firm FaceTime. Features include the ability to authorise only specific IRC clients to log in and manipulate the botnet. The Pipeline worm is different from most previous IM worms because it features multiple waves of attack.

Chris Boyd, director of malware research for FaceTime Security Labs, said: "Previous IM attacks have tended to focus on the damage done by the files, with little thought on the method of delivery, save for the quickest way to get those files onto a PC. Here, the motivation for the bad guys seems to be in lining up as many 'install chains' as possible to insure a consistent pipeline that can be controlled by their rogue botnet." ®

The essential guide to IT transformation

More from The Register

next story
One HUNDRED FAMOUS LADIES exposed NUDE online
Celebrity women victimised as Apple iCloud accounts reportedly popped
Rubbish WPS config sees WiFi router keys popped in seconds
Another day, another way in to your home router
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
NZ Justice Minister scalped as hacker leaks emails
Grab your popcorn: Subterfuge and slur disrupts election run up
HP: NORKS' cyber spying efforts actually a credible cyberthreat
'Sophisticated' spies, DIY tech and a TROLL ARMY – report
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
New Snowden leak: How NSA shared 850-billion-plus metadata records
'Federated search' spaffed info all over Five Eyes chums
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?