is back, reports security firm Arbor Networks, and dressed to kill in its April Fools’ outfit.
Arbor Networks blogger Jose Nazario notes that Storm's latest variant began appearing sometime during March 31, greeting users with a simple “Doh!
April’s Fool. (sic)” message that hyperlinks to an IP address.
Users clicking the link are taken to a web page with a cute
picture and an automatic download, prompting them to run the download as soon
as it completes. If the user follows these directions, he or she will find his or her computer added to the decentralized Storm botnet, which security
analysts think contains anywhere from 20,000 to 10 million computers.
April Fools’ Day is only the latest such occasion to be
exploited by Storm, which in the past has sent out e-mail
messages with headlines like, “Saddam Hussein alive!” and “Fidel Castro dead.”
The original Storm variant earned
it namesake in January 2007, when it infected thousands of computers in the
United States and Europe with the headline “230 dead as storm batters Europe.” Six
more waves appeared within three days of the worm’s initial attack, and by
January 22 the Storm Worm was responsible
for 8% of virus infections around the world.
The worm’s author is still unknown, and its decentralized
structure leaves investigators little to target, let alone quantify: an October
2007 estimate that the Storm botnet is down to 20,000 computers was disputed by
security researcher Bruce Schneier, who noted that the botnet’s owner is
partitioning the network into discrete units, likely for their independent
Nazario warns users to look out for the following signs of
quote: How can thing like this not be stopped, or why is is so hard?
quote: A link is distributed that if clicked will take you to an adress where you can download the malicious code. Why can't autorities hunt down and find the domain? That's not to dificult. Once the domain is questioned, they'll give up the user. I know other countries are involved, but now can't ISP when warned about an adress block access to that site?
quote: Are you willing to conduct a worldwide campaign of teaching EVERY single Windows user on the planet in using Limited User Account (LUA) and Software Restriction Policy (SRP) in WinXP SP2 or Vista?
quote: Arbor Networks blogger Jose Nazario notes that Storm's latest variant began appearing sometime during March 31, greeting users with a simple “Doh! April’s Fool. (sic)” message that hyperlinks to an IP address.Users clicking the link are taken to a web page with a cute picture and an automatic download, prompting them to run the download as soon as it completes.
quote: which security analysts think contains anywhere from 20,000 to 10 million computers.
quote: You've probably also forgotten how to play games,
quote: share files with others
quote: pretty much do any kind of work oriented tasks.
quote: Oh how I envy your peace of mind...
quote: Before I start I will say: I have tri boot with Vista Basic, XP Pro, Sabayon Linux 3.5b2 Standard. I guess what I am really trying to say here is I have the right to talk about this.
quote: Not really. Wine or compiling WineX/cedega yourself works just dandy if you have a nocd crack in hand...haven't got a game in my collection that Wine cant handle.
quote: This brings us back to: Wine, if you mean m$ office. Or you could use a free program, like open office which, again, has come preloaded on every version of linux I have ever used. You could also have meant things like 3d graphics apps which have started leaning further and further towards linux, and not windows.
quote: Oh, how I envy your blissful ignorance, BSODs, and driver hells.
quote: Wine Is Not Effortless
quote: feels good to run linux i've forgotten about these virus worries and only when I read about them do I ever happen to remember all the stress of managing anti-virus utilities/precautions for windows machines..