Why You Should Think Twice About Instant Messaging

Security experts are warning that a Trojan worm is being spread via AOL Instant Messenger. Hackers appear to be building a "botnet" out of infected computers. The malicious software is spread by tricking people into thinking that they are opening a jpeg file.

FaceBook security specialists advised users not to open any files sent to them via AIM.

FaceTime Security Labs identified the worm as "W32.pipeline" and said the executable software tricked its way into people's computers by posing as a picture attached to an instant message from someone on their AOL "buddy list."

Once in computers, the worms open the doors to download infectious software that essentially lets those behind the invasion take control of the machines, according to FaceTime.

"The motivation for the bad guys seems to be in lining up as many 'install chains' as possible to insure a consistent pipeline that can be controlled by their rogue botnet," said FaceTime director of malware research Chris Boyd.

AIM users are duped into letting the worms in through psychological ploy from the "social engineering" playbook, according to FaceTime.

The infected attachments are disguised as image "JPEG" files and arrive with AIM messages to the effect of "hey would it (be) okay if i upload this picture of you to my blog?"

The worm sends copies of itself to addresses found on AOL instant messaging (AIM) buddy lists of newly infected machines, FaceTime said.

The robotic computers can be amassed in a network referred to as a "botnet."

"FaceTime researchers believe that the ultimate goal of the W32.pipeline is to create a sophisticated botnet that can be used for a range of malicious purposes," the Foster City, California, company said in a statement.

My daughter installed AIM on a computer against my wishes a short while ago. That computer is currently out of commission because of some weird behavior I noticed, including trying to repeatedly install something (it keeps failing to install whatever it is for reasons unknown). I now wonder if this may be the cause. But there's your tip for the day - do not open ANY attachments sent via AIM.

Other Links to this Post

1. Blue Crab Boulevard » Blog Archive » Just So MSN IM Users Don’t Feel Left Out — Monday, 25 September , 2006 @ 11:31 am