Skip to Content

AOL Tech

worms posts

Web, Social Networking

New Twitter Worm Hijacks Your Account via Direct Message

Another day, another Twitter worm. The latest worm (or Tworm, if you please) to hit the micro-blogging site is even sneakier and more dangerous than others we've warned you about. That's because it's being spread via direct messages (DM) from users you know, not random spam accounts.

Let's keep it simple. If you receive a DM with the link pictured above, don't click on it. Delete the message immediately. According to Mashable, this link will direct you to a fake (but apparently pretty believable) log-in page, where, if you enter your account information, the worm will infect your account and set about infecting others by sending the link. If you already clicked on the link and your account has been hacked, simply change your password and report the problem to Twitter. Mashable says that Twitter is aware of and is handling the problem. As usual, avoid any suspicious links, even if they're from friends. [From: Mashable]

Computers

U.K. City Unable to Issue Traffic Tickets After Conficker Attack

In the occasional rush to get to the office on time, just about all of us have either illegally driven in the carpool lane or exceeded posted speed limits. Sometimes, you get caught and pay a fine, and sometimes, you get away scot-free. Call it luck and thank the Lord, but drivers in Manchester, England have something else to thank for eluding recent traffic fines -- the Conficker worm.

The Register reports that after Conficker infected the city's computer systems in February, more than 1,600 drivers who were spotted on camera driving illegally in bus lanes were saved from paying fines totaling £43,000, or about $71,300. In response, the city disabled all USB ports on government computers and outlawed memory sticks, which it claims caused the infection. All in all, the worm cost the city nearly £1.5 million, or $2.4 million, between unpaid fines, consultants' fees, clean-up costs, extra staff, and a new backup strategy for its system.

Read more →

Web, Social Networking

Fake Twitter E-Mail Invite Carries Malicious Worm


Twitter keeps on getting hit by phishing traps, scams, and worms. Recently, these attacks have come via links to YouTube videos, fake accounts, and infected tweets. Now, spammers are sending out fake e-mail invitations to join Twitter, according to Symantec's blog.

The e-mail, which has been sent to a large number of accounts and can be seen above, looks fairly legit, except for one tell-tale sign -- the body of the message does not include a URL that would direct users to the site. Instead, a .zip file called 'Invitation Card.zip' is attached to the message. Regular readers know the rule of thumb when it comes to unknown attachments: never, ever download or open them.

Read more →

Computers, Web

Thought the Conficker Virus Was Bad? Gumblar Is Even Worse.

If you thought Conficker was bad, meet Gumblar. If malware programs were comic book villains, Conficker would be Kingpin -- evil for sure, but really just a big bully. Gumblar on the other hand would be Galactus -- massive, all-powerful, evil, and extremely difficult to defeat.

ScanSafe, a computer security firm, has been tracking the progress of the worm since its arrival on the scene in March, according to CNET. Originally, the attack spread through infectious code that was planted in hacked Web sites and then downloaded malware from the gumblar.cn domain on to victims' computers. But that was just the opening salvo. As Web site operators cleaned their pages of the code, Gumblar replaced the original material with dynamically generated Javascript (Web site code that is created on the spot instead of being completely determined beforehand -- a key element of Web apps like Gmail) that is much harder for security software to detect and remove.

The evolved version also went about adding new domains to the list of sources for downloading its malware payload, including liteautotop.cn and autobestwestern.cn, and began exploiting security holes in Flash and Adobe Reader. The worm also searches out credentials for FTP servers (a method for uploading files to a Web site) on a victim's computer, using them to infect additional Web sites.

Read more →

Cell Phones, Web

Twitter Gets Swamped With Weekend Worms

Spring break is here, and, apparently, Twitter had a little too much fun over the weekend, waking up with a couple of nasty bugs. Thankfully, if the pieces of malware that made the Twitter rounds this weekend were STDs, they would be crabs -- annoying, but curable, and not particularly dangerous.

The first attack came Saturday, originating with a couple of accounts specifically created to spread the StalkDaily worm. By simply visiting an infected profile, a user would find her account hijacked and sending automated Tweets with a link to a Twitter-like service called StalkDaily. By the end of the day, Twitter had cleaned up most of the infected profiles, had deleted the offending messages, and had apparently plugged the security hole that allowed the exploit.

Then, on Sunday morning, a second attack hit, taking advantage of the same flaw. Oops. The new worm, called Mikeyy, simply sent out automated messages containing the word "Mikeyy," and mocked Twitter's inability to fix its vulnerability. Mikeyy spread even faster than the StalkDaily worm, and, in no time, people's Twitter feeds were clogged with messages such as, "Twitter please fix this, regards Mikeyy" and "Man, Twitter can't fix sh*t. Mikeyy owns. :)."

Read more →

Computers

Storm Worm Reborn as Malicious Valentine's Day Greeting

Waldec -- The Second Coming of the Storm Worm
As if the threat of the Conficker hanging over our heads weren't enough, now we've got the second coming of the Storm Worm, called Waledec, to watch out for.

Waldec spreads via e-mails claiming to have a Valentine's Day greeting for you. Clicking on the link contained in the message takes you to a page containing dozens of hearts with the message "guess which one is for you? Clicking on any of the hearts prompts you to download and install an .exe file containing malicious code that spams other e-mail addresses it finds in your inbox.

Paul Ferguson, a researcher at Trend Micro, maker of anti-virus software, says he believes that Waldec and Conficker are the work of the same group. There are hints in the coding that suggest the same organization worked on both viruses.

Waldec should be a little easier to avoid than Conficker because of its reliance on unsolicited e-mails, which we're hoping you've learned to ignore by now. [From: CNET]

Related links:

Computers

Tricky Windows Worm Spreads to 9 Million PCs



Remember this nasty worm with multiple-personality disorder we reported on last week? Well, apparently, it is still spreading, and is now responsible for an estimated nine million infected computers! So far it hasn't done anything especially nasty, beyond finding its way onto machines, but that doesn't mean you want it lurking on yours!

Security experts at F-Secure believe the piece of malware may not be acting as the hackers who designed it intended. The firm believes that the worm was meant to give false alerts saying that malicious software had been discovered on a user's PC and then encourage that user to buy fake anti-virus software. So far, this behavior hasn't been seen, but that doesn't mean that Conficker, Downadup, Kido -- whatever it wants to call itself -- isn't leaving open a back door for hackers to steal passwords and other personal information.

Microsoft has already released a patch to battle the worm, however one of its effects is to disable automatic updates on infected machines. So head to WindowsUpdate.com, if you haven't already, to make sure you get this latest patch! [From: FOXNews.com]

Read more →

Computers, Windows Software, Downloads, Viruses

"Friendly" Computer Viruses That Are Good For Your Computer

Friendly Viruses Set to Race Malicious Ones

Everyone likes to race, whether it's cars or skateboards or just people on two feet. Researchers at Microsoft are looking to apply this notion of competition to the world of viruses, with the hope of creating friendly worms to compete against malicious ones.

Similar to the current research that use genetically-modified viruses to deliver medication or fight cancer, the "good" computer viruses that Microsoft is working on would take advantage of a given security loophole in computer systems. These viruses would spread themselves out like self-replicating worms by finding computers capable of being infected, then installing themselves onto those compuers and patching any flaws or security holes.

In theory, these angel viruses would make the computer safe from any virus that would attempt to exploit the same loophole -- assuming they get to the exposed computers faster than the real viruses do.

This is all theory for now, though, so in the mean time, keep that virus-scanner updated.

From slashdot and New Scientist Tech

Related Links:

Audio/Video, Cell Phones, Computers, Top Lists

The Top 15 Tech Myths

We love lists -- you should have figured that out by now. This time, PC World came up with 15 tech myths, bursting one bubble at a time. We list a few highlights here.

Using third-party ink in your printer voids the warranty
Just plain not true. Of course, if the third-party ink damages the printer, then you're out of luck. But simply using third-party ink does not let Epson off the hook if your printer suddenly bursts into flames.

'Unlimited' cell phone data access is really unlimited
Think that extra $19 a month has you covered for all the data (e-mail, downloads, Web surfing) you want on your cell phone? Think again. Verizon's Terms of Service (TOS) forbids streaming media, uploading and downloading files and even has a 5 gigabyte-per-month cap on data. Cingular/AT&T also forbids media streaming and file sharing but has no data cap. And Sprint says it "reserve[s] the right to limit or suspend any heavy, continuous data usage that adversely impacts [its] network performance or hinders access to [its] network." Annoyingly vague, to put it lightly.

Macs are virus-free
Despite what the Cult of Mac tells you Macs are not 100 percent safe. A security researcher named Dino Dai Zovi took home a $10,000 prize for remotely hijacking a MacBook Pro. It took less than 10 hours to discover a security hole in Quicktime and set up a Web page to exploit it. Also, January was The Month of Apple Bugs as a pair of hackers revealed a new security hole in the OS for each day. In February the first worm virus for OSX was discovered. Macs are still more secure than Windows PCs, but because they're less popular, they tend to be less of a target.

From PC World

Related Links:

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews
  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    LG VX6000 (Verizon Wireless)
    Compact and stylish; impressive battery life; solid audio quality; sharp color screen; built-in camera; USB ready; affordable. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

    8.4 out of 10

    Velocity Raptor Signature Edition Gaming PC
    One of the fastest PCs we've tested; a PCI Express RAID card helps media encoding performance; typically immaculate Velocity Micro assembly; strong, three-year warranty. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling