Saturday, September 25, 2010

"Bom Sabado! " A new worm Hits google's Orkut

A new worm has Hit Google's Orkut early today and its spreading fast, the Infection looks pretty stubborn .

This wierd worm appears to be similar to one that appeared in Dec' 2007 and the people behind are suspected to be the same. A Portuguese Greeter worm

It appears that the communities like "Somente você me COMPLETA!, O virus Que Contagia, ADA - Adoro Dormir Abraçado, Eu tenho um grande AMOR" and few more random Communities

This greets you in the scrap book "Bom Sabado! " which translates to "Good Saturday" in contrast to the earlier on with 2008 vem ai… que ele comece mto bem para vc.” This translates to “2008 is coming…I wish that it begins quite well for you”.
No external links are involved just viewing the scrap spreads the worm. Although no cases of account infringement are noticed yet . This worm look to be having only a intention of fairly "Spamming" with greets.





Once the user views the scrap the account gets infected and runs a Javascript to post the scrap to all persons in the victims contact.


The javascripts look to appear from TPTOOLS (http://tptools.org/)

meanwhile the browser looks to be freezed however the code is executed in the background.

No official reports are out yet in this matter on the statistics and its impact.


The best countermeasure is to stay away from viewing the scrap or use "Noscripts" addon or block the scripts on the browser.

1 comment: