Topic: New World Cup worm surfaces

[Clive]

A new email worm that exploits interest in the World Cup has been discovered.

The Sixem-A worm spreads using a variety of disguises, including subject lines such as 'Naked World Cup game set', 'Soccer fans killed five teens', and 'Crazy soccer fans', to try and dupe unsuspecting users into clicking on a malicious attachment.

One of the messages sent by the worm reads as follows:

'Nudists are organising their own tribute to the world cup, by staging their own nude soccer game, though it is not clear how the teams will tell each other apart. Good photos '

Other messages, some of which claim to come from the CNN news organisation, can include:

'Soccer fans killed five teens, watch what they make on photos. Please report on this all who know.'

If the attached file is run, it attempts to disable security software on the infected computer and then spread itself to other email addresses.

Graham Cluley, senior technology consultant at security company Sophos, said:
"This worm exploits the public's interest in the World Cup to infect business users. While some recipients might find nude football an attractive prospect, this is one worm you don't want to catch sight of, as you'll be playing straight into the hands of hackers.

"It is very likely that more internet criminals will take advantage of users' football fever as the tournament heats up - people need to wise up to security threats, or risk scoring an own goal."

Cluley said that this is not the first time hackers have taken advantage of the World Cup. A year ago, the Sober-N worm offered tickets to the tournament in an attempt to entrap unprotected users, while in 2002, the Chick-F virus tried to exploit workers desperate to find out the latest scores from the World Cup in S Korea/Japan.


http://www.sophos.com