Badbunny

Badbunny, also known as SB/BadBunny-A (Sophos) and StarOffice/BadBunny (McAfee), is a multi-platform computer worm written in several scripting languages and distributed as an OpenOffice.org document containing a macro written in StarBasic.

Discovered on May 21, 2007, the worm spreads itself by dropping malicious script files that affect the behavior of popular IRC programs mIRC and X-Chat, causing it to send the worm to other users.[1]

Effects

If the macro is opened from the affected document, it displays the following message: "Title: ///BadBunny\\\" Body: "Hey '[USERNAME]' you like my BadBunny?" and loads one of four different scripts named badbunny.js (JS.Badbunny) under Windows, badbunny.pl (Perl.Badbunny) under Linux/Unix, or either badbunny.rb or badbunnya.rb (Ruby.Badbunny) under MacOSX.[2] Upon loading, the user is shown a pornographic image of a man dressed as a rabbit making out with a scantily clad woman in the woods.[3]

References

  1. ↑ "SB/BadBunny-A Win32 worm (IRC-Worm.StarOffice.Badbunny.a) - Sophos security analysis". Retrieved 2009-07-29.
  2. ↑ "Perl.Badbunny Symantec". Retrieved 2009-07-31.
  3. ↑ "StarOffice/BadBunny". Retrieved 2009-07-29.
This article is issued from Wikipedia - version of the 1/31/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.