IT-Review

Bropia.A to Target IM Networks

Akonix Systems, Inc. warns corporations about a new worm that is propagating over MSN through MSN Messenger and Windows Messenger instant messaging client applications.

The worm, called Bropia.A, sends a copy of itself to all contacts found in MSN Messenger and Windows Messenger IM-client applications. The worm downloads a Trojan horse program (called Rbot) which opens a back door into Windows systems. The Trojan horse application can then log the keystrokes of the unsuspecting user, collect system information and spread SPIM (spam over IM), according to security specialist F-Secure. The malware also disables the right mouse button of the infected machine to block access to context sensitive menus and makes changes to the volume settings of Windows, according to F-Secure.

To protect against this worm, Akonix advises customers to:

MSN

In general, Akonix advises customers to follow a defense-in-depth strategy for protecting against IM-borne attacks. This includes educating users on the risks of IM attacks, keeping anti-virus software up-to-date, and defining and enforcing policies within Akonix L7 Enterprise that minimize the risk of attack, such as a policy to block file transfers of executables over IM.

For IM attacks that are propagating through IM messages or known file transfers, Akonix issues the industry's only SPIM and Malware Policies. These policies are downloaded and enabled without any system downtime or IT intervention and automatically protect the customers' networks from risk of attack.

Source: press release

See also:

MSN Introduces New Communication Service That Enables Blogging, Picture Sharing and More

New MSN TV 2 Internet & Media Player from Microsoft

Content Security Manager 2100 CF from SonicWALL

Permalink: Bropia.A to Target IM Networks

Posted 01/24/05 | Filed under: Security |