NEWS FROM THE LAB - Saturday, December 23, 2006

Careful with Christmas.exe Posted by Mikko @ 14:10 GMT


We've just received a sample of something that's named CHRISTMAS.EXE.

When run, this IRCBot variant will try to download various malicious executables from web servers at waiguadown.008.net and user.free.77169.net.

As a decoy, it shows this Christmas-themed image:

Christmas.exe Image

Obviously, a gift that keeps on giving. To be avoided.