Be careful with blog comments and online emails with malicious code

Secure Computing warns that blogs, message boards, and online emails are currently being compromised by junk information that invites people to watch "funny" videos.

Secure Computing found a website containing a variant of the Storm worm. The worm will install components on the user's computer and analyze all network transmission through the layer-based service provider LSP) Alliance, and dynamically modify blog comments, message boards, and online emails, add a link with malicious code to continue spreading.

"This shows the new trends in malware spread through blogs, message boards, and online emails," said Dmitri Alperovitch, Chief Researcher at Secure Computing. "Because anti-virus software may not be able to detect this threat, therefore, it is especially concealed. This threat uses server polymorphism, which means it will be constantly reconfigured to cheat those authenticated anti-virus solutions ." Since it constantly changes executable files, it can easily avoid most of the most advanced anti-virus programs based on authentication technology.