CartNew Romanian Virus Speculates On Iraqi Crisis
Sunday, April 24, 2005
Spreading high, deletes files as well, say BitDefender Labs
A new virus is in the wild, European producer of antivirus BitDefender warned today. The virus, dubbed Antiman.A, speculates on a recent and tragic story involving the kidnapping of three Romanian journalists, abducted by a little-known terrorist Iraqi group approximately a month ago.
The subject line of the infected message is in Romanian and it varies from: "Voteaza azi!" ("Vote today"), "Antivirus," "Antimanele" ("Against Gypsy music"), to "Cum a murit Papa?" ("How did the Pope die?"). At the same time, the message body is also in Romanian, and among others, it calls for people to vote in a virtual poll concerning the withdrawal of Romanian troops from Iraq, or it pretends to be the latest version of an antivirus, which can solve "all your problems." Once executed, the malicious code erases each and all files which contain the names of well-known Gipsy music singers.
"The author of this piece of malware is most certainly a Romanian citizen, who has designed it in order to show his deep discontent with the ever increasing popularity of Gypsy music in Romania. Despite the fact that technically it is a very simple code, the virus is spreading at an amazing speed throughout Romania, due to the skilful social engineering tricks employed by its author," stated BitDefender CTO, Bogdan Dumitru.
A full description of the virus, as well as a free removal tool are available on the BitDefender website.
The subject line of the infected message is in Romanian and it varies from: "Voteaza azi!" ("Vote today"), "Antivirus," "Antimanele" ("Against Gypsy music"), to "Cum a murit Papa?" ("How did the Pope die?"). At the same time, the message body is also in Romanian, and among others, it calls for people to vote in a virtual poll concerning the withdrawal of Romanian troops from Iraq, or it pretends to be the latest version of an antivirus, which can solve "all your problems." Once executed, the malicious code erases each and all files which contain the names of well-known Gipsy music singers.
"The author of this piece of malware is most certainly a Romanian citizen, who has designed it in order to show his deep discontent with the ever increasing popularity of Gypsy music in Romania. Despite the fact that technically it is a very simple code, the virus is spreading at an amazing speed throughout Romania, due to the skilful social engineering tricks employed by its author," stated BitDefender CTO, Bogdan Dumitru.
A full description of the virus, as well as a free removal tool are available on the BitDefender website.
About BitDefender®
BitDefender is the creator of one of the industry's fastest and most effective lines of internationally certified security software. Since our inception in 2001, BitDefender has continued to raise the bar and set new standards in proactive threat prevention. Every day, BitDefender protects tens of millions of home and corporate users across the globe — giving them the peace of mind of knowing that their digital experiences will be secure. BitDefender solutions are distributed by a global network of value-added distribution and reseller partners in more than 100 countries worldwide. More information is available on our security solutions' site.