‘A new version of the Kelvir Instant Messaging worm checks system settings in order to be able to display its social engineering enticement messages in it’s victims own language.

The W32.Kelvir.HI worm replicates by sending a message to all the Microsoft Messenger contacts listed on an infected PC. The message says “I found your picture”, with an accompanying web link to the supposed picture. However, once the link is clicked, a copy of the W32.spyboot worm will be downloaded and installed on the new victim’s computer. Spyboot is a backdoor Trojan Horse, which will amongst other things, close down anti-virus and other security applications, as well as disable the Task Manager and Registry editing….’

Read more at New Multilingual Instant Messaging Worm

{Secure Instant Messaging}

Recent Entries

• Yahoo! offers phone via instant messaging
• FaceTime Secures Instant Messaging For Distance Learning University
• Yahoo Messenger Integrates VOIP
• Mobile IM for Skype
• New Botnets Utilizing Instant Messaging
• Secure Developers Portal for Instant Messaging Bots
• ScanSafe Intros IM Security Management
• SIP Unified Communications Is All the Buzz
• Akonix Rolls Comprehensive Instant Messaging Security Bundle
• Microsoft Messenger for Mac 5.1

This entry was posted on Wednesday, August 31st, 2005 at 1:40 pm and is filed under Secure Instant Messaging. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.