Storm Worm exploits Mideast tensions

 

Storm Worm exploits Mideast tensions

蠕虫风暴袭击中东地区

Published: 2007-04-09

 

Unknown attackers released a deluge of new Storm Worm variants over the weekend, using fake headlines warning of U.S. and Israeli attacks on Iran to pique the curiosity of potential victims.

 

The misnamed Storm Worm--in reality a Trojan horse program spammed out by attackers' bot nets--needs a trusting victim to open the attached file in order to infect the user's system. The subject lines of the e-mail messages that carry the program as an attachment use the tensions in the Middle East to convince users to open the file. Subject lines include "USA Just Have Started World War III," "Missle Strike: The USA kills more then 20000 Iranian citizens," "Israel Just Have Started World War III," and "USA Missile Strike: Iran War just have started," according to antivirus vendors.

据透漏，这个病毒是从黑客控制的“僵尸”机器中传播出来的，这个病毒发布大量有关美国发动第三次世界大战的虚假信息其中包括美国杀死多达20000个伊朗居民。

The latest round of variants has repacked the program with different settings to fairly successfully evade antivirus defenses.

最近的变种病毒可以成功逃脱杀毒软件的追查。

The Storm Worm is also called Trojan.Peacomm by security firm Symantec, the owner of SecurityFocus, and Win32.Zhelatin by antivirus firm F-Secure.