AIM Users Threatened By New Worm

Be on the lookout for Hey Check Out This instant messages appearing in your AIM client today.

Don’t click on the link. It’s another nasty worm, dubbed Oscarbot-B by some antivirus companies and Doyorg by others.

Users who do click on the link embedded with the purported buddy message, and either run or save the linked executable, trigger the worm. The worm opens a channel to Internet Relay Chat (IRC), where it can download and run files on the directions of the attacker, and gives the remote user control of a machine.

After that, the worm attempts to propagate by sending itself to everyone in a buddy list, prolonging the effect of the worm in the wild.

The malware focuses on Windows users of the AIM client, and is likely contained to that operating system. Antivirus companies suggest users keep an eye on signature file updates and install them as soon as possible.

David Utter is a staff writer for WebProNews covering technology and business. Email him here.