December 10, 2004 10:15 AM PST

Naked pinups revealed as virus

An antivirus vendor is warning people to be on the lookout for a worm disguised as nude glamour pinups, though the virus's threat level is very low.

The Maslan worm appears to be politically motivated, with infected machines intended to launch a denial-of-service attack against Web sites run by Chechen separatist supporters, antivirus firm Sophos said in an advisory Thursday.

According to Symantec, W32.Maslan.C@mm is a mass-mailing worm that opens a back door and exploits system vulnerabilities on a compromised computer. The worm also steals passwords using a keylogger. In addition, it attempts to attack a series of firewalls and antivirus settings on an infected machine.

The virus controls which e-mail addresses it spreads to, avoiding most Web mail addresses and any others that may report to antivirus or filtering companies, apparently a crude attempt to avoid detection. Panda, Sophos and Symantec have all been blacklisted by the worm, along with words such as "abuse," "privacy" and "spam," which, if they appear an e-mail address, may be an indication of an address used to report unsolicited or malicious mail.

Currently, the e-mail spreading in the wild has the subject line "123" or "12345" and an attached file called "Playgirls2.exe" or "Playgirls_2.exe," security companies said.

Sophos said the virus is timed on the first day of each month to attempt to launch a denial-of-service attack intended to swamp the targeted Web sites with Internet traffic.

Will Sturgeon of Silicon.com reported from London.

2 comments

Join the conversation!
Add your comment (Log in or register)
A better way to get some erotic reading and pics
Check out <a class="jive-link-external" href="http://www.ch4nce.com/story/2004/11/20/0010/6445" target="_newWindow">http://www.ch4nce.com/story/2004/11/20/0010/6445</a>

It's got some good stories and links - all without viruses.
Posted by (31 comments )
Reply Link Flag
...and then there's always The Hun
...and for some free titilation, there's always <a class="jive-link-external" href="http://www.thehun.com" target="_newWindow">http://www.thehun.com</a> - ahem.
Posted by hutchike (152 comments )
Link Flag
 

Join the conversation

Add your comment

The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use.

Inside CNET News

1-2 of 12

Scroll Left Scroll Right

What's Hot

Discussions

Shared

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

Markets

Market news, charts, SEC filings, and more

Related quotes

Dow Jones Industrials (0.57%) 72.81 12,874.04
S&P 500 (0.68%) 9.13 1,351.77
NASDAQ (0.95%) 27.51 2,931.39
CNET TECH (0.84%) 17.13 2,049.14
  Symbol Lookup