Symantec: Storm Worm intensifies

news
Jan 22, 20071 min

Spammers are blasting inboxes with the Storm Worm Trojan.

Symantec Corp. is warning today that the “Storm Worm,” a.k.a. Trojan.Peacomm, is spreading quickly across the Internet, due largely to an intense spam campaign. Symantec has raised its “threat rating” on Peacomm to category 3,.

AV companies appear to be locked in a pitched battle with Peacomm’s authors (the malware is believed to be of Russian origin). After generating headlines last week for using news about the storms battering Europe to trick some users into installing the Trojan, the authors further tweaked the program over the weekend to respond to changes in detection from the AV companies.

Peacomm arrives in emails claiming to contain a video clip with a variety of subject, Symantec says, including “230 dead as storm batters Europe” and “British Muslims Genocide.”

The program is believed to be used as part of penny stock scams, which use spam email to drive up the price of companies in which the criminals have taken a stake.

Symantec claims that this is the biggest “outbreak” in more than a year, since Sober.O appeared in May, 2005 — though Peacomm isn’t spreading itself. Instead, Symantec claims to be receiving around 3,500 messages each minute with Peacomm attachments. Now that’s some spam!