Virus attacks Echelon

Published: 18 May 2001 y., Friday
UK-based anti-virus outfit Sophos is reporting a new variant of the LoveBug Outlook worm which contains a large amount of hidden text, apparently designed to attract the US National Security Agency's Echelon spy satellite network and overload it. Comments within the executable file include large swaths of text such as: "NSA national security agency code PGP GPG satellite cia yemen toxin botulinum mi5 mi6 mit kgb .mil mil base64 us defence intelligence agency admiral diplomat alert! BATF," and so on. As for social engineering, this worm looks like a total non-starter. The subject line reads, !!!; the body reads, :-) MuCuX...; and then there's an attached file: echelon.vbs. We don't expect it to get very far. Which is sort of a pity, really; the author has a few pertinent observations to make and questions to ask, such as "Stop Violence Pentagon. Why are you testing your new weapons on iraq? You are trying to protect children from porn but you are also killing them and other innocent people in iraq... ...and another thing... why are you using echelon type stupid things to listen around...?" The virus was "written By Extirpater and beyin. (i am NOT from iraq, and not protecting iraq/islamic anyway)." These are believed to initiate an Echelon snoop session; but it's likely that Echelon relies on pattern-recognition rather than dictionaries, so loading millions of e-mails with tantalizing keywords really won't attract the machinery and bring the system down. The new Outlook worm is also mildly destructive, and will over-write MP2 and MP3 files and .jpeg files by modifying their extensions; and, like the LoveBug which it resembles, mail itself to everyone on a victim's address list. Also, "if the worm determines that mIRC (Internet Relay Chat) is installed on the system it will drop a mIRC script that will send the worm on via mIRC," Sophos says. The company says they've had only one report of the worm in the wild, which is hardly a surprise considering its weak inducements to open the attachment.
Šaltinis: securityfocus.com
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

European Payments Council issues report about ATM anti-skimming, security tips

According to the council's report, ATM-skimming fraud, which involves illicitly copying ATM card information stored on magnetic stripes, is increasing in Europe. more »

HP Brings First All-in-One Touch-enabled Desktop Technology to Business Customers

Building on the success of the recent HP TouchSmart PC for the home, HP today introduced the market’s first all-in-one, touch-enabled desktop PC for businesses. more »

Microsoft’s Ballmer Announces Availability of Windows 7 Beta

Microsoft Corp. Chief Executive Officer Steve Ballmer announced the beta availability of the Windows 7 operating system as well as the availability of the latest version of the Windows Live, a suite of personal communications services and applications. more »

Wincor World '09 to focus on cash, deposits, self-service

Cash-cycle management, branch optimization, sales/marketing consultation and automation, automated checkout and managed services are expected highlights for January's Wincor World 2009. more »

Christa Prets on media literacy in a digital world

We all need to better understand the media we are touched by daily, especially the young, says Austrian Socialist Christa Prets. MEPs backed her report on “media literacy in a digital world” on Tuesday. more »

RSS: another way of keeping up-to-date with parliament

Since October, readers of the European Parliament's web pages have had access to RSS, which allows them to keep up-to-date with what is going on via a free subscription. more »

Fox Selects Motorola For Transition To All HD

Fox and Motorola collaboration results in first all-HD programming distribution strategy. more »

Wincor Nixdorf installs cash management technology at Shell service stations nationwide

Wincor Nixdorf has won a contract to integrate its cash management solution, consisting of staff-assisted self-service terminals, software and comprehensive services, in the checkout zones and IT operations of Shell Deutschland’s 1,300 service stations. more »

“e-Parliament” discusses connection with voters

The role that the internet can play in parliamentary democracy was explored this week when 400 people gathered in Brussels for the annual “e-Parliament conference”. more »

History, culture and art go digital

The EU’s new digital library brings vast treasure trove of historical documents, rare and valuable manuscripts and exquisite cultural artefacts to your desk. more »