Culham Innovation Centre, UK (15th January 2004) Kaspersky Labs, a leading information security software developer, has detected a mass mailing of a Trojan program “small.cz” that downloads Mimail.p, a new version of the Mimail email worm, from a remote server.
To date, isolated incidents of infection by this malicious software have been reported in various countries throughout the world.
The Trojan has been sent in the guise of a message from the payment system PayPal. The sender’s address is falsified as “firstname.lastname@example.org”, the message topic appears as “PAYPAL.COM NEW YEAR OFFER”, and the attachment is named paypal.exe. When run, the Trojan in the file connects to a remote server, downloads Mimail.p and installs it in the system.
Mimail, which was created in Russia and first appeared on the Internet at the beginning of August 2003, is a classic email worm, which spreads via mail messages. The new modification of the worm differs from previous versions only by the fact that it is compressed using UPX. This makes it more difficult for some anti-virus programs to detect Mimail.p
After installation, Mimail.p begins the process of replication. The worm first secretly scans several directories of the infected computer and extracts email addresses. It then sends copies of itself to these addresses using its built-in procedure.
The worm has dangerous side effects, which can cause significant harm to users. In particular, Mimail.p tracks the activity of E-Gold and PayPal payment system applications installed on the infected computer. It extracts confidential information and sends this information to a number of anonymous addresses belonging to the worm’s author. In the same way, the worm steals other confidential data such as user names and passwords for email, access to system information etc.
Protection against Mimail.p has already been added to the Kaspersky Anti-Virus database.
More detailed information about this malicious program can be found in the Kaspersky Virus Encyclopaedia.
About Kaspersky Labs
Kaspersky Labs is an international software-development company offering advanced products that protect a wide spectrum of customers, from home users to enterprise-wide networks, against viruses, hackers and spam. For fourteen straight years the company has waged a battle against computer viruses, and in doing so has gained unique knowledge and skills that have led to Kaspersky Labs becoming a technology leader and acknowledged expert in the development of virus defences.
Kaspersky Lab UK
+44 870 011 3461
Marylebone Media Relations
+44 1344 876558
This press release was distributed by ResponseSource Press Release Wire on behalf of Marylebone Media Relations in the following categories: Consumer Technology, Personal Finance, Business & Finance, Computing & Telecoms, for more information visit https://pressreleasewire.responsesource.com/about.