"CoolNow" worm attacks MSN messenger users. (Security).

A new Internet worm by the name of "CollNow" infects computers upon visiting malicious Web-sites and spreads using the popular MSN Messenger Intern-pager. At this time, several incidents of infection by this malicious code have already been reported. A malicious person initially places "CollNow' on an anonymous Web-site and performs an advertising campaign (either via e-mail or any other means) to attract users. Upon visiting this site, a malicious Java-script is executed, which uses the "Frame Domain' security breach in Internet Explorer to imperceptibly infect the target computer. Then "CoolNow" gains access to the MSN Messenger and, on behalf of the computer owner, sends to all the recipients from the address book an invitation to visit the malicious Web-sit. Up to date 7 modifications of the worm have been detected using different Web-sites. Currently these are in the process of being eliminated to prevent the worm from spreading further. However, the original 'CollNow" code can be easily modified and lin ked to newly opened Web-sites. Users should urgently update their anti-virus software and install Internet Explorer security patch available from Microsoft. This will ensure that not only current but also future versions of the worm will not be able to infect the PC.

www.kaspersky.com