Worm disguises self as a WGA
The recent hetze around Windows Genuine Advantage Notifications (WGA) has not been remained also by malwaremakers unnoticed. Past weekend a worm dove appeared on that as the antipiracytool of Microsoft. The spread lifted used via the in Europe relative little instant-messenger of AOL.
Behind the false WGA-tool, Cuebot-K, a worm sticks that on genfecteerde pc's the firewall eliminates and a back-door opens. By here can to send fraudulent hackers own programs uploaden, for instance massive spammessages or harmed a Denial-or-Service-attack on out to lead.
The WGA-disguise of the worm goes further then the initile packing. Also in the rear he does fixed self for as a Windows Genuine Advantage, more in the survey of Windows-services. “Technical onderlegde users will not surprised its WGA in the list of services to see - and they will self perhaps do not realize that a worm the name abuses”, thinks Graham Cluley, Senior Technology Consultant by protections business Sophos.