W32/Famus-F on the loose
W32/Famus-F on the loose

Bin Laden virus threatens hard drive data

Famus-F worm lures victims with promise of terrorist video

Written by Robert Jaques, vnunet.com

Security experts have intercepted a malicious worm that threatens to erase all data on infected PCs hidden in emails allegedly containing videos of Osama Bin Laden.

The Famus-F worm (W32/Famus-F) has been discovered in the wake of George W Bush's re-election as US president, and less than a week after an Arabic television station broadcast the first videoed speech by Al Qaeda leader Bin Laden since the US-led war in Afghanistan.

The worm arrives in the form of a bilingual English and Spanish email, with the subject line: 'More terrorism this year.'

Advertisement

The message body reads: 'Last speech from Bin Laden. Please forwards this video to everybody.' It includes a password 'cnn'.

If executed, the worm attempts to forward itself to email addresses found on infected computers and drops a number of files onto the hard drive.

Hidden inside the virus is some Spanish text which translates into English as: 'This computer has been infected with the LIBERTAD (FREEDOM) virus. This is to protest against the violation of free expression rights. Now all the data in your hard drive is been erased The Hobbit.'

Graham Cluley, senior technology consultant at Sophos, said: "Hackers and virus writers will try all kinds of topical tricks to entice people into running their malicious code. It seems this time that the virus writer has focused on the public's appetite for breaking news on the war against terror.

"There will be many who will be interested to know how terrorists will react to George W Bush's success at the polls. Those people should not lower their guard and be fooled into accepting unsolicited email attachments."

Reassuringly, according to Cluley, the Famus-F worm is not yet spreading very successfully. "We have only detected a handful of incidents at the moment in the UK and Spain. It is not in the top 20," he told vnunet.com.

Sophos information on W32/Famus-F

Tags:

Reader comments

More from Computeractive

News

The latest home computing news

Downloads

The best PC tools, applications and more

Reviews

Independent opinions on new hardware and software

Step-by-step guides

Easy-to-follow projects with pictures

PC Help

Solve PC problems with our Q&A

Videos

PC projects demonstrated and product reviews

Articles

An in-depth look at how to get the best from your PC

Magazine

What's coming up in Computeractive

Forums

Get help with your PC problems from our readers

Competitions

Your chance to win computing prizes

Shopping

Great deals on products, services and more

Computeractive CD Rom 10
All 26 issues of Computeractive from 2007 on one CD-Rom.

Ultimate Guide to PC Troubleshooting
Everything you need to know to solve your PC problems.

Create your own calendars softwareCreate your own Calendars
The fun and easy way to create your own calendars!

Computeractive - Issue 280Computeractive Back Issues
Missed an issue? Click here to find a back issue

Blogs

Windows Watch

Windows Watch

Keeping an eye on the latest XP and Vista news

Got a Mac? Get anti-virus.

02 Dec 2008Apple Mac users have long boasted that, unlike their Windows (sorry, sorry, "PC") counterparts, they don't need to spend time and money...

Download Junkie

Download Junkie

Your daily dose of download discussion

Get the free commercial version of TuneUp Utilties 2007 worth £30

01 Dec 2008Only recently did we tell you about the fantastic new release of TuneUp Utilities 2009 , which will enable you to tweak,...

Advertisement

Free email newsletters

Techno babble demystified...

[Display all definitions]

Or type in any computer-related word and click "Go"

Advertisement

Computeractive is not reponsible for content of Google adverts

Primary Navigation

© Incisive Media Ltd. 2008. Incisive Media Limited, Haymarket House,
28-29 Haymarket, London SW1Y 4RX, is a company registered in the United Kingdom with company registration number 04038503

Search computeractive.co.uk