New AIM Worm 'Talks' to Victims
A new worm on the AOL Instant Messenger service is believed to be the first that will actually "talk" with a victim in an attempt to trick them into downloading a malicious file. Security firm IMLogic warned of the worm, dubbed IM.MySpace04.AIM on Tuesday.
According to the IMLogic advisory, the conversation will start out with "lol thats cool". When a user responds to the IM, the worm will respond with "lol no its not a virus" or some other message to attempt to trick the user into downloading the file.
The file, "clarissa17.pif," will disable antivirus software and install a backdoor, as well as altering system files. After performing the alterations, it will then begin to send itself to other contacts on a users buddy list.
IMLogic warned that a user might never know they are infected as the worm is programmed to hide the messages it sends. While the worm is currently not widespread, the firm warned that an outbreak could soon follow and users should be wary of strange IMs with links arriving from their buddies.
The firm has advised that users ensure links in IMs do not lead to malicious ".pif" files and suggests keeping antivirus software is up to date in order to stay protected.