'Silly' worm targets USB sticks

Malware uses old-fashioned propagation technique

Written by Iain Thomson

Experts are warning of a new worm which spreads via USB keys in a reversion to the earliest methods of virus distribution.

SillyFD-AA installs itself onto systems and puts a message in Internet Explorer reading 'Hacked by 1BYTE'. It also installs an autorun.inf on any removable drives, such as USB sticks or floppy discs.

"USB keys are becoming so cheap that marketing people are prepared to use them as 'throwaways' with the aim of securing sales leads," said Graham Cluley, senior technology consultant for Sophos.

"Computer owners should tread very carefully when plugging an unknown device into their PC, however, as it could have malicious code planted on it.

"With a significant rise in financially motivated malware it could be an obvious backdoor into a company for criminals bent on targeting a specific business with malicious code."

Once the drive is connected to another computer the worm automatically installs itself on the new computer and repeats the exercise in an attempt to spread further. Users are advised to turn off the Autorun feature in Windows.

The technique mimics the very earliest methods of virus propagation when viruses were spread solely via floppy discs.

Virus protection then was easy; users simply had to cover the indented tab on a 5.25in floppy with sticky tape, the so called 'virus condom'.

See also:

reader comments

related articles

USB keys get better security

Manufacturers use encryption and fingerprint readers to protect data 30 Apr 2004

 

Smallest secure USB drive unveiled

Netac develops 13g device with built-in encryption technology 12 Jul 2006

Virus peril shifts from email to websites

Malware authors shift strategy 03 Jul 2006

Headless teddy wins weirdest USB drive

Gadget blog shows weird and wonderful designs 23 Jan 2007

Rise in Mac malware attacks 'inevitable'

Growing popularity brings growing concerns 15 Feb 2008

Apple advises users to get anti-virus

Possible virus threat in the wild? 03 Dec 2008

Spammers warn of local nuclear meltdowns

New malware scam claims incidents in UK, Australia and Canada 12 Sep 2008

latest news

Ballmer highlights aims for New Year

Ballmer announces Windows 7 beta and future alliances designed to improve information sharing 08 Jan 2009

Active Storage completes UK Jigsaw

Jigsaw unveiled as Raid vendor's first non-US Platinum partner as it launches in Europe 08 Jan 2009

Dell quits Irish production

Vendor to slash 1,900 jobs in Limerick as it migrates assembly for EMEA customers to Poland 08 Jan 2009

poll

Challenging times ahead?

Challenging times ahead?

Do you think there will be a lot of channel job cuts in 2009?

Previous poll results

Paul Anderson, Trend Micro

Vendor Q&A: Paul Anderson, Trend Micro

During this Q&A session Paul Anderson, UK country manager of Trend Micro talks about the changing threat landscape and how Trend is working with resellers in 2009

Sara Yirrell and Rick Wallis

Vendor Q&A: Rick Wallis, NEC Computers

In this exclusive vendor Q&A, Rick Wallis, UK sales director at NEC Computers talks to CRN editor Sara Yirrell about his firm’s plans for the channel.

events

Channel Expo 2009 logo

Channel Expo 2009

The UK's top reseller exhibition will return to the NEC on 20 May 2009

CRN Fight Night 2009

The channel's only white-collar boxing event is back

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories

Primary Navigation