Luc Castermans schreef:
*http://www.itnews.com.au/newsstory.aspx?CIaNID=52570&src=site-marq
A newly-discovered worm targeting OpenOffice attempts to download
indecent
JPEG images onto compromised Windows, Mac and Linux PCs.*
Sophos warned today that
Badbunny-A<http://www.sophos.com/security/analyses/sbbadbunnya.html>,
a macro worm for OpenOffice/StarBasic that also drops scripts in other
languages, downloads pictures of a man wearing a bunny suit performing a
sexual act in woodland.
The malware infects computer users when they open an OpenOffice Draw file
called badbunny.odg
A macro within the file performs different functions depending on whether
the user is running Windows, MacOS or Linux. These can include executing
other self-replicating JavaScript and Perl viruses. advertisement
The worm also downloads and displays an image of a scantily clad woman
with
a man dressed as a rabbit, irrespective of the operating system being
used.
"The group responsible for writing the BadBunny malware does not seem to
have much confidence in it spreading, as it sent the worm directly to our
labs," said Graham Cluley, senior technology consultant at Sophos.
"Hackers have written plenty of StarBasic malware in the past, but the
most
'in the wild' this one is likely to get is by displaying a picture of a
'furvert' in the woods.
"This is old-school malware seemingly written to show off and prove a
proof
of concept rather than a serious attempt to spy on and steal from
computer
users.
"A financially motivated hacker would have targeted more widely-used
software and been more discreet in their use of imagery."
Copyright (c) 2007 vnunet.com <http://www.vnunet.com/>
Belachelijk dat dit als nieuws wordt gepresenteerd.
Het is niet in het wild aangetroffen, en om enige schade aan te richten
of zich verder te verspreiden zouden gebruikers niet alleen het bestand
moeten openen, maar ook nog expliciet toestaan dat macro's worden
uitgevoerd.
--
Vriendelijke groet,
Simon Brouwer.
| nl.openoffice.org | www.opentaal.org |
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
