SillyFD-AA Worm Targets USB Sticks

Permalink: SillyFD-AA Worm Targets USB Sticks

Sophos researchers have identified a new strain of malware which targets removable drives.

The worm, called ‘SillyFD-AA‘, attacks USB memory sticks and floppy disks creating hidden files called ‘autorun.inf,’ which ensure a copy of the worm runs the next time the affected devices are plugged into computers running Windows.

The worm changes the title of Internet Explorer Windows to announce that the computer has been ‘hacked by 1BYTE’.

The worm, which hasn’t yet been widely distributed, is potentially dangerous because it could easily be modified to transmit through other routes such as e-mail and instant messaging.

The worm provides a new way for hackers to attack companies’ systems, effectively side-stepping e-mail gateway protection which scans files coming into a company via e-mail attachments, but not files brought in via removable drives such as USB keys and CD ROMs.

Sophos has advised users to disable the autorun facility of Windows, so that removable devices do not automatically launch when attached to PCs.

Any storage device attached to a computer should be checked for viruses and other malware before use.