Bonjour, J'ai d'abord cru à un hoax. (pardon Christophe) Mais on trouve une trace sur le site de Sophos http://www.sophos.fr/security/analyses/sbbadbunnya.html?_log_from=rss
Jacques GAIGNARD CAZIN Christophe DSIC MISSION CRISTAL a écrit : > Si quelqu'un en sait plus ... > > Christophe > > OpenOffice worm downloads bunny porn > > http://www.itnews.com.au/newsstory.aspx?CIaNID=52570&src=site-marq > > By Robert Jaques, 22 May 2007 10:04 AEST Security > A A A > > A newly-discovered worm targeting OpenOffice attempts to download indecent > JPEG images onto compromised Windows, Mac and Linux PCs. > > Sophos warned today that Badbunny-A, a macro worm for OpenOffice/StarBasic > that also drops scripts in other languages, downloads pictures of a man > wearing a bunny suit performing a sexual act in woodland. > > The malware infects computer users when they open an OpenOffice Draw file > called badbunny.odg > > A macro within the file performs different functions depending on whether > the user is running Windows, MacOS or Linux. These can include executing > other self-replicating JavaScript and Perl viruses. > advertisement > > > > The worm also downloads and displays an image of a scantily clad woman with > a man dressed as a rabbit, irrespective of the operating system being used. > > "The group responsible for writing the BadBunny malware does not seem to > have much confidence in it spreading, as it sent the worm directly to our > labs," said Graham Cluley, senior technology consultant at Sophos. > > "Hackers have written plenty of StarBasic malware in the past, but the most > 'in the wild' this one is likely to get is by displaying a picture of a > 'furvert' in the woods. > > "This is old-school malware seemingly written to show off and prove a proof > of concept rather than a serious attempt to spy on and steal from computer > users. > > "A financially motivated hacker would have targeted more widely-used > software and been more discreet in their use of imagery." > > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
