Akonix Security Center Identifies New IM Worm Spreading as a Holiday Greeting Card; Latest Virus Indicates New Attack Method Used During the Holiday Season.

SAN DIEGO -- Akonix Systems, Inc. today identified a new instant messaging (IM) worm named W32/Aimdes.E, propagating over a leading public IM network. The Akonix Security Center classified the worm as low risk and immediately used the industry's only real-time IM malware, SPIM and protocol update system to automatically push updates to customers for protection against this threat.

DESCRIPTION:

Aimdes.E is spread through a holiday greeting sent from one IM user to another. Holiday greetings present a vulnerable avenue of attack and Akonix warns that this method will most likely be used throughout the month of December. Virus writers have once again found a new social engineering technique to introduce this vulnerability. The worm is downloaded once the recipient opens the greeting card. Upon execution, this memory-resident worm propagates through one of the major IM networks. It sends the following message to other users listed on the infected user's buddy list:

The user has sent you a Greeting Card, to open it visit: http://g{BLOCKED}aol.com/index.pd?source=christmastheme? my_christmas_card.com

When an unsuspecting recipient clicks the link, the worm automatically installs itself on the affected system. The worm also has backdoor capabilities. It opens random ports and comes with a built-in Internet Relay Chat (IRC) client engine, which enables it to connect to an IRC channel and wait for several commands from a malicious user. This routine then compromises system security.

To learn more about the Aimdes.E worm, please visit the Akonix Security Center at http://www.imsecuritycenter.com.

PREVENTION:

For Akonix L7 Enterprise customers, systems are automatically configured to download and install the latest updates to the Akonix SPIM & Malware Filter, and no IT intervention is required. Akonix L7 Enterprise is the industry's only IM security system that combines dynamically updated IM security policies and integrated anti-virus scanning to provide the most comprehensive protection for corporate networks from IM-based attacks.

For other organizations, it's recommended to ensure all desktop computers are updated with the latest security patches, and that all public IM use is appropriately blocked or managed.

ADDITIONAL INFORMATION:

Akonix Security Center experts are available to comment on the Aimdes.E worm and other real-time security risks. Representatives are able to discuss the rise in IM threats during 2005, based on the increased use of IM for business critical communications.

For more information about the Akonix Security Center, or to sign up for IM security alerts, please visit www.imsecuritycenter.com.