New Worm poses as Microsoft WGA

By | June 30, 2006

Well, by now you should have your fill of Microsoft WGA news from us, but this one is just too ironic to pass up on.

InfoWorld and ZDNet are both reporting that a new worm is making it’s way through the ether that makes itself look like the Microsoft anti-piracy program.

The malware has been classified as a worm and spreads through AOL’s Instant Messenger program, said Graham Cluley, senior technology consultant for Sophos, a security vendor.

Sophos is calling it W32.Cuebot-K, a new variation in the Cuebot family of malware. The worm has a range of malicious functions. After it’s installed, the worm immediately tries to connect to two Web sites, a sign it may try to download other bad programs on the machine.

Cuebot-K can disable other software, shut off the Windows firewall, download new malicious programs, perform basic DDOS (distributed denial of service) attacks, scan local files and spawn a command prompt, Sophos said.

Sounds like a lot of fun.

Iconic One Theme | Powered by Wordpress