BitDefender�s Virus Analyst Warn P2P Network Users
April 2007
FORT LAUDERDALE, Fla. � April 23, 2007 � Virus analysts at BitDefender�, an award-winning provider of antivirus software and data security solutions, have issued a warning to users of P2P networks. A new threat, the Ymeak.A worm has been spreading like wildfire, in part due to a simple yet effective social engineering technique: it masquerades as an installer executable of some popular program.
When it is first run, the worm displays a message ('The setup file is corrupted') to lull the user into a false sense of security. It then proceeds to download and install the RBot trojan. This done, the trojan begins to spread itself from the victim's computer using any of five file-sharing networks (Limewire, Shareaza, Bearshare, Morpheus or Morpheus Ultra) as a vector and a new name.
"The bit of evil genius here is that the name for each new copy of the worm is chosen at random from certain torrent and direct download sites,� declared Viorel Canja, head of the Antivirus Lab for BitDefender. �This way, the worm will always have an attractive name, so people will attempt to download and run it."
BitDefender users are not at risk and should let BitDefender antivirus disinfect the infected files (if any are found). A full technical description can be found here: http://www.bitdefender.com/VIRUS-1000079-en--Win32.Worm.VB.Ymeak.A.html
Business Insights
- Bitdefender Threat Debrief | August 2023
- CTI and Its Frameworks: Unpacking the Diamond Model
- Emerging Cyber Threats and Innovations: Key Highlights from Black Hat 2023
HOTforSecurity
Bitdefender Lab
IoT Insights
