Kaspersky Lab detects a new threat via IM

A new generation of web worms

According to the Russian provider of IT security solutions Kaspersky, a new generation of worms is thriving among the tools of instant messaging (Skype, Live Messenger, Google Talk, XFire, all very popular among the users of this type of communication).The security experts at Kaspersky Lab have warned users to be aware of a new family of worms that spread via instant messaging (IM). They stated said they have detected at least four variants of the worm-Worm.Win32.Zeroll. What is interesting to notice is that this malware multilingual, just like the polyglot worm targeting MSN Messenger discovered in 2008.

Links with malware agents

In practice, the attack takes the form of an instant message with a link that leads to a site incorporating malware (malicious agents). The message is usually caused by contact with the infested machine. If the user opens the page, he will trigger the infection process and in turn becomes an intermidiary for the worm that spreads via his IM contacts.The program is also able to open a back door in order to take control of the infected computer.
According to Dmitry Bestuzhev, regional expert from Kaspersky Lab for Latin America, the creators of the worm are just starting their criminal activities and they are trying to “infect as many machines as possible in order to get good offers for services such as pay per install programs, spamming. It’s also worth mentioning that only three anti-virus programs (including Kaspersky) detect the threat. Some would say this is actually good to know considering that the 2011 version of security suite from Kaspersky has been recently launched.