« Deadbeat: | Main | Being Regis »

Livra worm spreading

The W32/Livra worm is Windows specific. Among other things, it steals passwords and emails them to a location in Russia. Look for the subject lines "Avril Lavigne - the best," "Reply on account for IIS-Security," and "According to Daos Summit."

Attachments include "AvrilSmiles.exe," "AvrilLavigne.exe," "resume.exe," and "Readme.exe."

UPDATE: Here's more on additional WinWorms going around.

Post a comment

hello