New AIM Instant Messenger Worm Impersonates iTunes

The Internet Patrol default featured image
Share the knowledge

The newest worm in the big apple known as the Internet is worm_opaniki.y, also known as Oscabot-L. What makes Opaniki.y unique is that it impersonates iTunes, by sending itself around disguised as “iTunes.exe”.

Propogating itself across AOL’s Instant Messenger platform, AIM, Opaniki.y / Oscabot-L tricks unwary users into clicking on it by making them think that it is associated with a legitimate product, iTunes, piggy-backing on the success of Apple’s wildly popular music software for both Mac and Windows.

Once clicked on and installed, Opaniki.y sets about sending a self-propogating message to everyone in the host user’s AIM buddy list.

According to a TrendMicro advisory, Oscabot-L (Opaniki.y) also “connects to an Internet Relay Chat server . This enables a remote user to perform malicious commands on the affected machine. The said routine provides remote users virtual control over affected systems, thus compromising system security.”

Advises Sophos analyst Graham Cluely, “Of course, all Internet users should exercise great caution about what programs they choose to run on their computer — whether they arrive via Web download, e-mail attachment or Instant Message. This worm is unlikely to be much more than a storm in a teacup, but it still makes sense for everyone to ensure their anti-virus software is continually kept up to date.”

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

Get New Internet Patrol Articles by Email!

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

 


Share the knowledge

Leave a Reply

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.