Support Virus.Org

Help support Virus.Org by donating.
Donating allows us to keep this site free and pay the running costs of all our services.
MSN Filtering Woes PDF Print E-mail
Written by Editor   
Wednesday, 27 September 2006 16:19

Last week we saw a problem with the filtering of links sent via MSN Messenger being used by malware to direct unsuspecting victims to web sites laden with malware. Microsoft then fixed the issue using some beefed up filters, however it seems that the problem is back again. 

One of the bits of malware that originally exploited the MSN link problem was W32/Licat.C you can see more about it here. Over the weekend Microsoft implemented a filter fix to prevent the links sent out over MSN getting to users.

It seems however the problem has returned courtesy of the authors of the Licat malware. What have they done, well they are exploiting the MSN feature of 'Offline Messages' to bypass the filters.

It seems that when a message is set to an offline user they are passed to the user when they come online without any filtering taking place. It is known that the messages are being sent to offline users, however the exact manner they are performing this is not clear at this time. This could just be the IM-Worm component being lazy when sending messages or by design.

Add this page to your favorite Social Bookmarking websites
Digg! Reddit! Del.icio.us! Google! Live! Facebook! Technorati! StumbleUpon! Yahoo!