Homepage worm spreads quicker than Lovebug

NEWS
An email worm that purports to contain a link for the next cult Internet homepage appears to be spreading faster than the Lovebug virus A new email worm, known to virus experts as VBS.VBSWG2 and dubbed Homepage, is reported to infected scores of companies today, and anti-virus experts say that there may be more infections in the first 24 hours than was seen with the Lovebug virus -- widely regarded as the most profilic virus of all time. Earlier reports suggested that Homepage was spreading faster than the Kournikova worm, but now anti-virus firms are saying it could take top spot. According to experts, the worm will not cause damage to the computer system that receives the initial email, but could bring down corporate mail servers by sending out thousands of copies of itself. The worm is spreading at a formidable rate. MessageLabs, a UK company that outsources virus tracking technology to stop the spread of computer viruses and worms, said that since yesterday evening it has seen more than 12,000 copies of the Homepage worm in the UK alone. A MessageLabs spokeswoman this afternoon said the proportion of emails infected with the worm puts Homepage on par with the most prolific virus of all time, the Love Bug. See the impact of the worm on the volume of viruses caught today by Messagelabs here. "Early propogation reports indicate that this virus is spreading faster than many of the biggest viruses we saw last year," said Mikko Hypponen of Finnish antivirus firm F-Secure this morning. "It seems to be spreading faster as Anna Kournikova". Antivirus vendor Symantec said that last night more than 30 companies reported receiving the worm. UK-based antivirus company Sohpos reported that 40 of its corporate customers have been hit so far and F-Secure said it has received over 30 reports. The email spreading the worm claims to contain a page that is guaranteed to become the next Internet craze. It has the subject line "Homepage", and the message, "Hi! You've got to see this page. It's really cool ;o)". The attached file -- homepage.html.vbs -- is not an html document, but a malicious Visual Basic script. Once executed, the script will forward the same email on to all the people in a victim's address book and automatically open one of four pornographic Web pages on the user's computer. According to experts, the malicious email attachment uses similar code to the Kournikova worm, which spread quickly around the world in February by encouraging victims to click on a supposed picture of the Russian tennis star Anna Kournikova. Experts also say that the worm was created using an updated version of the worm-generating toolkit that spawned Kournikova. As yet it is unclear where the worm started, although some anti-virus experts suggest it may originate from Asia. Graham Cluley, head of research at Sophos, said the new worm illustrates that users need to be alert to the danger of email attachments. "It's not even a particularly clever bit of social engineering," he says. "It just says 'this is cool'." What is most disturbing about the success of the Homepage worm, according to Cluley, is that many companies are still not blocking Visual Basic attachments from entering the company -- they could easily do so with basic filtering technology. Eric Chien, chief researcher at Symantec's Antivirus Research Centre (SARC), predicts that Homepage will be seen at more companies today. "The average corporate customer will probably see it on their mail server," he said. Take me to the Virus Workshop Have your say instantly, and see what others have said. Click on the TalkBack button and go to the ZDNet News forum. Let the editors know what you think in the Mailroom. And read what others have said.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

dede0202

Hello ALL USERS OF THE PIRATE BAY I WOULD PUT AN EXPLANATION ON PIRACY Story Idea ILLIGALE AND SHARING THOSE THAT NET Dissent NOT WELL BUT TO CA...

58 minutes ago by dede0202 on The Pirate Bay infringes copyright, High Court decides
Sungwoo

do You know that? it can install 4G Ram. So i buy 4g and install It work! I can run call of duty 4,6,7 [Modern war... 1,2,3] Call of duty 1 was...

2 hours ago by Sungwoo on Loose Ends - Upgrading the Aspire One 522
itsajob

2. Bad idea. Making up patch cables loses you your commission from the cable supplier. 3. If you tidy up, other people can understand where the...

8 hours ago by itsajob on Ten IT jobs to save up for those rare lulls
Roberto_Store

Now On Sale, Unlocked iPhone 4S / Galaxy Note In Factory Box. Roberto-Techie(UK) ”Now on Sales” Smartphone, Android,Tablets,Gadget &...

11 hours ago by Roberto_Store on Samsung Galaxy S III lined up for sale
Paul Smyth

Is this classic FUD? One thing I would definitely have notice is a Mozilla threat to stop supporting GNU/Linux.

13 hours ago by Paul Smyth via Facebook on Firefox rapid release improves Fedora Linux
UnderINK

I agree with the previous commenter wholeheartedly. I couldn't say it better myself. This is very 'Big Brother'. And while I agree with protecting...

17 hours ago by UnderINK on European e-identity plan to be unveiled this month
Simon Bisson and Mary Branscombe

Nice to see that Turing's idea of a general purpose computer doing once-hardware-powered tasks in software is now universal ;-) Mary

23 hours ago by Simon Bisson and Mary Branscombe on Software with everything
Jason Burchell

seriously now. I've only bothered to read a small bit of the comments. do me and the rest of the world a favour. stop saying it does not work or...

1 day ago by Jason Burchell via Facebook on Music industry negotiating over 24-bit downloads
Philip Charles Cohen

Read about it and weep, John Donahoe ... In addition to Visa’s V.me, there is now MasterCard’s PayPass digital wallet soon to arrive; another...

1 day ago by Philip Charles Cohen via Facebook on PayPal takes phone-based payments to the high street
apexwm

Leslie Satenstein : Where have you ever seen Mozilla even mention this? Firefox is the most popular browser in the GNU/Linux OS, so I don't see...

1 day ago by apexwm on Firefox rapid release improves Fedora Linux
songmaster

SHleG: Do you remember building a clockwork scorpion kit (I'm pretty sure I have a photo of it somewhere) — I think it was called something like...

1 day ago by songmaster on Software with everything
Chris Wortman

Good I love Yahoo! Their search engine is getting better than Google as of late. I find more of what I want on the first page, and usually within...

1 day ago by Chris Wortman via Facebook on Linux Mint 13 ramps up for KDE release
PatrickG

openhgs has made the point for Windows 8 multiple monitors without realising it! With Windows 7 you have to switch the mouse and so your focus...

1 day ago by PatrickG on Windows 8 could speed multi-monitor uptake
Leslie Satenstein

Mozilla has threatened to stop supporting Linux. I guess that UBUNTU is going with another browser. I indicated that if Mozilla stops supporting...

2 days ago by Leslie Satenstein via Facebook on Firefox rapid release improves Fedora Linux
Andy Bolstridge

Much as I abhor Microsoft's licensing practices, this is almost certainly down to purchasing IT equipment via 3rd party consultants - you get the...

2 days ago by Andy Bolstridge via Facebook on 6 million wasted licences and £1,200 PCs: welcome to government IT
Jack Schofield

@openhgs Windows users have had multiple desktops since Linus started writing Linux. They just haven't shipped as standard because not enough...

2 days ago by Jack Schofield on Windows 8 could speed multi-monitor uptake
Jack Schofield

@Phil at Cloud4 What, Microsoft gets £1,200 per PC and £1,622 per server? Gosh, I'm amazed....

2 days ago by Jack Schofield on 6 million wasted licences and £1,200 PCs: welcome to government IT
craigsc

You guys have no idea what is going on at Autonomy. Autonomy could have been a much more profitable organization. The sales operations at Autonomy...

2 days ago by craigsc on HP cuts 27,000 staff as Autonomy chief Lynch leaves
Moley

How does this impact on dual or multi booting? Seems to me to more or less prohibit this, from Windows 8 anyway. Will Grub 2 recognise Windows 8,...

2 days ago by Moley on Windows 8 start-up speed forces USB boot workaround
apexwm

I don't understand why there cannot be a slight pause during the boot process so the user can press a key. Many operating systems do this, even if...

2 days ago by apexwm on Windows 8 start-up speed forces USB boot workaround