Spamta Worms Go on to Make Assiduous Move

PandaLabs has identified a number of incidents resulting from a new variant of the Spamta worm, rapidly on increase. These outbreaks of malicious code create a critical situation that forces security firms to concentrate on combating such attacks, in particular. However, creators of this malware are quick to launch other stealthy threats that could be more damaging.

Spamta.PV worm spreads by connecting to a web page to download latest versions of it. It also drops many files onto the computer it targets. These files are the different components of the worm. Spamta.PV proliferates via e-mail message having various characteristics and a file attachment. The worm does not show any alert warnings, which makes it difficult to know if the PC is infected by the worm residing on the system.

The BuckFeed.A is a less dangerous Trojan with the features of a backdoor that exposes UDP port 1044, enabling an attacker to gain remote control of the targeted computer. This Trojan also links to a website to download different versions of itself. BuckFeed.A can only spread by an attacker's action.

Spamta.QH worm delivers the Trojan identified as SpamtaLoad.CO through an e-mail message having a number of characteristics while it creates many files in the Windows directory. One of them is a typical text file and has a replica of the worm; another file contains the address to which the worm sends out the Trojan.

PandaLabs laments that the creators of the Spamta worms do not adhere to the saying: "all good things come to an end"; otherwise they would not be continuously sending waves of almost identical variants of this malware.

Luis Corrons, director of PandaLabs regretted in the recent publication 'Virus Yearbook 2006' of the firm that the injections of this malicious code could increase on the Internet. Such an activity rises over the Christmas season, and most users making purchases online could find the security of their systems in jeopardy, if they have not initiated the necessary protection.

Corrons concludes that to counter malicious code that spread, as fast as in a few hours, good anti-malware solutions are imperative to spot new threats.

Related article: Spamta Variants- Still Causing Headaches

» SPAMfighter News - 1/4/2007