Scrapkut worm fast targeting Orkut users

Online social networks have been a fad for some time now. But, before you leave some more smart scraps on the global social networks, beware of the bugs. The pesky malicious mails and spams have hit the social networking sites and could potentially sour your relationship (both online and offline!) with that someone special in the virtual world.

Your love for scrapping and watching videos Orkut, a social networking site, may end up sending malicious mails from your login to anyone. A worm named Scrapkut is fast targeting Orkut users.

Taking note of the problem, the cyber security wing of the department of information technology (DIT) has suggested all Orkut users refrain from downloading any links posted on Orkut. A malicious scrap message is posted to victim's scrapbook containing a fake link to YouTube video looking as if it is from a known member of its friend list. When the victim clicks on the link, it's redirected to some malicious website which prompts you to download the file "flashx_player_9.8.0.exe" disguised as a flash upgrade. And the victims whole system comes under the virus attack. The active Orkut virus was tracked on Friday last week while other viruses have been active on several other social networks for a few weeks now.

Similar attacks on Facebook, MySpace and Yahoo! MediaGrid have also come to light in recent weeks. On Facebook and MySpace, the user may be caught unawares while uploading photographs. After executing the malicious binary code, disguised as flash memory, the Scrapkut virus downloads further binaries-windosre-mote.exe, logservicess.exe and win32chekupdate.exe - to perform malicious actions on victim system. The downloaded file logservicess.exe copies itself as maindwxp.exe to different locations to ensure its execution on every start-up of infected system.

0 comments