OpenOffice worm downloads bunny porn

Malware targets Windows, Mac and Linux computers

Written by Robert Jaques

A newly discovered worm targeting OpenOffice attempts to download indecent JPEG images onto compromised PCs.

Sophos warned today that Badbunny-A, a macro worm for OpenOffice/StarBasic that also drops scripts in other languages, downloads pictures of a man wearing a bunny suit performing a sexual act in woodland.

The malware infects computer users when they open an OpenOffice Draw file called badbunny.odg.

A macro within the file performs different functions depending on whether the user is running Windows, MacOS or Linux. These can include executing other self-replicating JavaScript and Perl viruses.

The worm also downloads and displays an image of a scantily clad woman with a man dressed as a rabbit, irrespective of the operating system being used.

"The group responsible for writing the BadBunny malware does not seem to have much confidence in it spreading, as it sent the worm directly to our labs," said Graham Cluley, senior technology consultant at Sophos.

"Hackers have written plenty of StarBasic malware in the past, but the most 'in the wild' this one is likely to get is by displaying a picture of a 'furvert' in the woods.

"This is old-school malware seemingly written to show off and prove a proof of concept rather than a serious attempt to spy on and steal from computer users.

"A financially motivated hacker would have targeted more widely-used software and been more discreet in their use of imagery."

See also:

reader comments

related articles

 

Spammers warn of local nuclear meltdowns

New malware scam claims incidents in UK, Australia and Canada 12 Sep 2008

Hackers hit Sony PS3 website

SQL injection vulnerability compromises web pages 02 Jul 2008

Spam Pledge calls for end to junk email

Thirty years is enough, says Sophos 01 May 2008

latest news

Exclusive: Bell Micro EMEA confims job cuts

Distributor looking to make cost savings of 10 per cent across the business 21 Nov 2008

Avnet looks forward to 2009

Chief executive Roy Vallee reveals why the distributor is confident of riding out the storm 21 Nov 2008

PC growth forecasts slashed by two-thirds

Market watcher downgrades 2009 PC growth expectations from 11.9 to 4.3 per cent 21 Nov 2008

poll

Securing the future

Securing the future

Does the security channel need a governing body?

Previous poll results

Vendor Q&A Session: Rick Wallis, NEC Computers

Vendor Q&A Session: Rick Wallis, NEC Computers

During this Q&A session Rick Wallis, UK Sales Director at NEC Computers, talks about the firm’s reasons for committing to a 100 per cent channel strategy

In the Studio with CRN: Oracle

CRN TV catches up with Alan Hartwell, vice president of technology solutions and channels at Oracle

events

Channel Expo 2009 logo

Channel Expo 2009

The UK's top reseller exhibition will return to the NEC on 20 May 2009

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories

Primary Navigation