Virtumundo now spreads via Sneakernet
Mar 20, 2009 Security News
The Virtumundo worm now is able to infect and spread via USB, CD-ROM or network share using Windows AutoRun, much like Conficker.
Sophos security researchers issued a warning that the Virtumundo trojan, also known as Virtumonde or Vundo, is now infecting computers via AutoRun, a Windows feature that enables files or programs to run immediately as soon as a removable media device, such as a USB stick or CD-ROM, is connected to a computer.
Virtumundo is an adware program that displays pop-up advertisements on the desktop and also downloads other software from various remote servers, according to researchers at Sunbelt Software. Ever-evolving, the trojan is capable of attaching itself to browsers and injecting fake entries into search results.
Go read the rest HERE




Leave a Reply