Secure Computing says Virus Attacks Email and Web Protocols

Don’t you wish that someone would figure out a way to plant viruses only on the machines of those that create them ? Secure Computing Corporation is warning the public that blogs, bulletin boards and webmail are now being spammed with messages to visit a website to view "fun" videos. The company has discovered a website containing a variant of the Storm worm. The worm installs a component on a user’s machine that analyzes all network traffic via a layered service provider (LSP) integration and dynamically modifies blog comments, discussion posts and webmail-based emails as they are being posted by the user to include a link to the malicious code, thereby propagating itself to other victims. This threat uses server polymorphism, which means that it is continuously being repackaged to make the binary appear different to signature-based anti-virus solutions. With the executable file being changed continuously, Secure says it sneaks below the radar of the leading anti-virus programs, which are largely signature-based. Viruses, worms, Trojans and other malware have traditionally been distributed through users’ email address books, and made to look like messages. With this threat, we begin to see the addition of a Web attack component to traditional email based malware. The company says that its TrustedSource global reputation system and proactive malware detection are already protected from this type of malware activity. Just goes to show that if you don’t know the source, don’t click the mouse.