Home > News > New Worm Infects Through Explorer Flaw • Bookmark   • Newsletters   • Register Search Options

NEWS STORY

New Worm Infects Through Explorer Flaw

New Worm Infects Through Explorer Flaw
Get XBIZ News
Apr 7, 2004 10:41 AM PDT    Text size: 
LOS ANGELES – A new version of the Bugbear.e virus emerged on the Internet this week, infecting computers by exploiting a flaw in Windows-based Internet Explorer.

The worm uses an HTML email that exploits the flaw in browsers to cause its dangerous executable file to silently run without the user clicking on it.

The email messages that carry Bugbear.e are blank, use fake "from" addresses and can have one of many subject lines, including "Click on this!", "25 merchants and rising” and "15 FREE Bonus!" It carries an attachment with a name that's randomly chosen from a file found on the infected computer and has either a .zip or .htm ending. Clicking on the attachment also will cause infection by the virus.

As of Wednesday, there is no available fix or "patch" for Bugbear.e, which first appeared on Monday. But antivirus companies have rolled out software updates that can block Bugbear.e and other variants that also have emerged.

The virus isn't prevalent on the Internet, though its auto-execution feature could help it gain ground, according to Network Associates Inc.'s virus-response center, which also warned of a medium-risk virus known as "Netsky.s," which first emerged Sunday.

Such attacks are somewhat common in Trojan horses but worms like Bugbear.e unnerve security experts because large numbers of computers could be vulnerable to attack and quick defenses would be harder to come by.

Bugbear.e's use of a flaw with no available patch illustrates how the gap between the knowledge of a vulnerability and the release of malicious code that brings us ever closer to a zero-day network worm, an attack using a flaw that security experts don't yet know about.

Microsoft wasn't immediately able to comment on the flaw or when a fix might be available, but its support site, support.Microsoft.com, has additional information available.

The flaw that Bugbear.e exploits was disclosed in February and has since been used by several Trojan horses, which are dropped onto PCs by malicious websites. The virus essentially advances the delivery of a Trojan by using email to push PC users into viewing malicious web content.

Bugbear.e finds sensitive personal information and sends it to the attacker, including cookies, text from open windows and data captured by a program that logs keystrokes to grab passwords and credit card numbers.

More ways to get XBIZ News:  RSS Feeds  |  E-Newsletters  |  Desktop Widget  |  Mobile
Looking for porn star news and behind-the-scene videos? Check out XFANZ.com !

OPINIONS & VIEWS

Why a Traffic Network Killed a Popular Offering

Change begets change. Nothing propagates so fast. If a man habituated to a narrow circle of cares and pleasures, out of which he seldom travels, step beyond it, though for never so brief a space, his departure... More »

Luring Cam Users With the Right Ad Format

The live cam marketplace is highly competitive filled with big-, medium- and small-sized players. So how do you stand out from the crowd to attract new users or persuade users to come back and spend their... More »

Are Your Payment Forms Losing You Sales?

Whatever product online merchants are selling, their ultimate goal is conversions — and one cannot overstate the importance of payment forms, which can make or break a transaction. The difference... More »
XBIZ NEWSLETTERS
Stay informed of the latest industry developments. Get XBIZ newsletters delivered to your inbox. Subscribe today!
Enter email address:

* To manage existing subscriptions click here.






POPULAR PRODUCTS & SERVICES
Submit your press release to
multiple news outlets with 1 click.
Subscribe to RSS news feeds or
add free content to your website.
Access XBIZ news and articles
with your mobile device.
Subscribe to XBIZ World magazine, the industry's leading e-commerce trade publication, delivering in-depth coverage of the online, mobile and ancillary digital markets.

UPCOMING EVENTS

EXXXOTICA Chicago

Jun 23 - Jun 25
Chicago, IL.

Latin America Adult Business Expo

Jul 10 - Jul 12
Cartagena, Colombia

ANME Founders Show

Jul 16 - Jul 18
Los Angeles Marriott Burbank Airport

QWEBEC Expo

Aug 03 - Aug 06
Montreal, Quebec
Everyday thousands of business professionals browse XBIZ's industry directory for quality products and services. Not listed yet? Your company could be losing potential new business. Submit your company today!
Use XBIZ RSS feeds to stay informed of the latest industry developments or as a content syndication tool for your website!