By ECT News Security Desk TechNewsWorld Part of the ECT News Network
07/27/04 1:03 PM PT
Don't click on those alleged Osama bin Laden "suicide" pictures. The pictures are a hoax. They connect curious viewers to a damaging "Trojan horse" program. Word about the images spread fast late last week and through the weekend via Usenet postings, instead of the usual method of attaching them to e-mail.
How Much is 'Free' Costing You? Learn how DaveRamsey.com saw a 567% uplift in ROI with Omniture. This complimentary guide and webinar cover the most important factors in selecting an analytics solution. Download Now.
An online security firm warned Saturday that the latest Internet virus was using claims about the death of terrorist leader Osama Bin Laden to trick people into infecting their own computers.
British-based computer security group Sophos.com revealed that statements have also been posted on thousands of Internet message boards offering a link to information about the purported suicide of Osama Bin Laden, leader of the al-Qaeda terrorist network and the world's most wanted fugitive.
Internet Chat Rooms Spreading Virus
Thousands of rogue messages have been posted on Internet chat rooms in the past few days suggesting journalists have discovered the body of Bin Laden hanged.
The messages urge users to visit a Web site to view photos of Bin Laden, which they claim have been withheld by U.S. authorities while they confirm the identity of the body.
Sophos.com, has published a sample of the posted messages: "Osama Bin Ladin was found hanged by two CNN journalists early Wednesday evening. As evidence they took several photos, some of which I have included here. As yet, this information has not hit the headlines due to Bush wanting confirmation of his identity but the journalists have released some early photos over the Internet."
E-Mail Links to Trojan Horse Virus
Hackers are also sending e-mails supposedly containing evidence that Osama Bin Laden has committed suicide.
The e-mails direct users to a Web site where a file containing photographs of the alleged suicide can be downloaded. In reality, however, when unsuspecting users click on the link purported to be for downloading photographs of Bin Laden's body, their computers are infected with a "Trojan horse" virus that gives the perpetrators access to, and control of the victim's computer.
Graham Cluley, senior technology consultant for Sophos, stated "Thousands of messages have been posted onto Internet message boards and Usenet newsgroups claiming that journalists from CNN found the al-Qaida leader's hanged body earlier this year."
Sophos: Ongoing Virus Attacks
Last week's 'Bin Laden' virus is emblematic of the ongoing wave of criminal acts launched on the Internet by computer hackers.
Cluley also remarked, "Hackers and virus writers will try all kinds of tricks to entice people into downloading their malicious code. It seems this time that the hacker has focused on the public's morbid curiosity and appetite for news on the war against terror."
In light of the Bin Laden hoax, security experts are warning anyone with a computer to be sure they have up-to-date anti-virus software to prevent themselves from becoming victims of this latest Trojan, nicknamed "Hackarmy."
MyDoom Worm Variant Nails Search Engines, Users July 27, 2004
MyDoom.O is much more clever than earlier MyDoom variants in imitating the kind of notification messages computer users are used to getting when their messages are
returned as undeliverable. MyDoom.O is also more talented at replicating itself than earlier versions of the worm.
Related Stories
New MyDoom Variant Stalks More Victims July 26, 2004
MyDoom.O is more talented at replicating itself than earlier versions of
the worm. The latest version takes the domain names it finds and
searches the four major search engines for all known e-mail addresses at
the target domains. The MyDoom.O variant also has a back door component
that will let hackers continue to take over computers already
compromised by other virus infections.
New MyDoom Virus Now on the Loose July 26, 2004
MyDoom.O is a mass-mailing worm with an SMTP engine that sends e-mails to addresses harvested from infected machines. The sender's "from" e-mail address is forged, and therefore does not indicate the true identity of the sender.
Google, Other Sites Slowed by MyDoom Worm July 26, 2004
The reports about the worm, a variant of a Web attack called MyDoom, came as outages on the search site Google.com hit in the United States, France and Great Britain. In many places the site was said to be working normally.
Bin Laden Suicide Virus: Latest Internet Hoax July 26, 2004
Last week's launch of the 'Bin Laden' virus is indicative of the ongoing wave of malicious activity launched on the Internet by virus writers. Graham Cluley, senior technology consultant for Sophos, remarked, "Thousands of messages have been posted onto Internet message boards and Usenet newsgroups claiming that journalists from CNN found the al-Qaida leader's hanged body earlier this year."
Related News Alerts
More by ECT News Security Desk
Sophos: Worm Spies on Innocent Computer Users August 23, 2004
Sophos believes that the W32/Rbot-GR worm is evidence of a growing trend of more and more malware spying on innocent home computer owners and poorly-protected businesses. Once installed on an infected computer, remote hackers can gain access to the information on the PC's hard drive and steal passwords as well as spy on innocent users via their webcam and microphone.
New Bagle Virus Rolls Around World August 10, 2004
The new variant, known as Bagle.aq, collects addresses from e-mail software on the infected computer and places them in the 'From' field when it sends itself. The message with the spoofed address therefore appears to be from a legitimate user.
Microsoft Windows XP Service Pack 2 Arrives August 06, 2004
"Service Pack 2 is a significant step in delivering on our goal to help customers make their PCs better isolated and more resilient in the face of increasingly sophisticated attacks," said Bill Gates, chairman and chief software architect at Microsoft.