Computer virus
The latest Storm attack uses email greeting cards to dupe users

Storm worm seeks out April fools

New malware attack no laughing matter

Written by Shaun Nichols in California

The latest Storm attack appears to have started in the past few hours

Jose Nazario Senior security engineer, Arbor Networks

The infamous Storm worm has used April Fools' Day to launch its latest spam offensive.

The new attack uses email greeting cards to dupe users into downloading and launching the Trojan application.

Spam messages inform users that they have received an April Fools' greeting card. On clicking the link, the user is redirected to an all-numeric URL and a page which attempts to automatically download an executable file.

The executable contains malware which will add the user's PC to the huge Storm botnet.

The malware network uses peer-to-peer networking tactics to update the software and instruct machines within the network to perform further malicious activities.

Jose Nazario, senior security engineer at Arbor Networks, said that the attack appears to have been launched quite recently.

Nazario reported in a blog posting that the campaign "appears to have started in the past few hours, and reports indicate it was in preparation for the past 24 hours or so".

The attacks follow a familiar pattern for Storm. The operators behind the malware have been using phoney holiday greeting cards to spread the malware almost since the worm was first discovered.

Valentine's Day and New Year's Day have also been recent catalysts for Storm worm attacks.

The storm botnet has become something of a legend within the security community. Researchers have warned that its sophistication in spreading and managing infections could serve as a template for future worms.

There have also been fears that the storm botnet is being rented out to other criminal enterprises which are using its extensive network for phishing runs.

Further reading

Spammers crack Gmail Captcha codes

Sharp rise in spam points to Gmail breach   More...

Lottery scam in sham Oxfam spam

'You've won £850,000!'   More...

Hybrid Trojan/worm attacks turn nasty

New worms acting in Trojan-like ways   More...

Storm worm continues its rampage

Botnet makes new spam run, but security companies strike back   More...

Related articles

Storm botnet connected to phishing ring

Experts fear hackers selling time on botnet   More...

Storm resurfaces for Valentine's Day

Old worm, old trick   More...

Hackers step up website attacks

Security forecast for 2008 makes grim reading   More...

Storm clouds Valentine's Day inboxes

Malware continues to recruit unwary users   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement