Source of AIM Worm is in Middle East

Attackers in the Middle East may be compromising computers that use AOL Instant Messenger.

Read PCWorld.com – AIM Worm Spreads.

Excerpt (emphasis mine):

The W32/Sdbot-ADD worm infecting some users of AOL Instant Messenger is more dangerous than previously thought, according to Facetime Security Labs, the researchers who discovered the worm in October.

The rootkit installed by the worm, lockx.exe, is allowing systems to be further compromised by a group of attackers based in the Middle East, according to Facetime researchers. The attackers are installing additional malicious code capable of stealing personal information, according to the group.

Share