The Arabic-Aware Virus Makes Entry

Viruses commonly use English language. But if they use other languages they would mostly be Chinese, Russian, German, Portuguese or Spanish. Sometimes they can use Indonesian, Malay, Thai or Japanese languages as well. But a virus knowing Arabic is rare, according to researchers.

The current trend where a virus propagates through removable devices, it is easy to create it and insert the worm characteristics into different kinds of trojans like the Infostealer and Downloader. Such a beginner's virus or worm is being developed in every part of the globe, as per the news published by Help Net Security on June 6, 2007.

On June1, Symantec detected a computer virus that uses Arabic or English language titles while checking open windows. The company dubbed the virus W32.Alnuh and found that it spreads easily and shuts down programs.

It seems the virus is more of an experiment rather than trying to create trouble, observed Symantec. Incidentally, it is an Arabic-aware virus that is tending towards a sharp rise, suggested the security software company.

Before the virus surges abundantly, such as the Chinese viruses had in the past, both computer and security users in countries speaking Arabic language should become vigilant and guarded, said Masaki Suenaga, security researcher at Symantec Corp. CBC News published this on June 6, 2007.

When in 2005 a Trojan virus had struck Arabia, it attempted to interfere with the adult websites surfing by flashing contents from the Koran.

SophosLabs had recognized the Trojan as Yusufali-A, which tracks website activities that Windows users are browsing. In that the virus would read the title bar of the window and if any word didn't match the taste of the Trojan such as "teen", "Sex", "xx" etc. then the virus would hide the content by minimizing the window and in its place display Koran messages.

The Arabic-aware Trojan virus doesn't appear to steal confidential information or money, unlike usual malwares. Rather it seems to behave like a moral guardian by blocking viewer ship of web pages it considers unsavory, said Graham Cluley, senior technology consultant for Sophos. The company published this on its website in September 2005.

Related article: THE SPAM MAFIA

» SPAMfighter News - 6/25/2007