W32.AhS00N virus

孙燕姿：“不要随便开 attachment 哦！”

Nov 20, 2004
PC virus baits users with Stefanie Sun 'song'

By Chua Hian Hou

A NEW mass-mailing computer virus posing as a song by popular singer Stefanie Sun was discovered on Wednesday - possibly the first malicious program to feature a Singaporean reference.

Unwary fans of 26-year-old Sun who are tricked into opening the file will find their computer reprogrammed by the W32.Yanz-A virus into sending more of the virus electronically to people in their e-mail address book.

So far, though, 'not many' e-mail messages with this virus have been detected worldwide, and none in Singapore, said Sophos Anti-Virus Asia-Pacific managing director Charles Cousins.

However, he warned that this situation could change quickly. 'Stefanie Sun is well known in many Asian countries and she does have a keen fan following - some of whom may not think twice about launching an e-mail attachment claiming to be connected to their heroine.'

Typically, the infected e-mail promotes the singer in its subject line and text, and comes with an attached file, 'Sun_Yanzi_Mp3.zip'.

Although it looks like an MP3 music file, it is actually a compressed data file. When users double-click on it, it will download the virus file into the computer's hard disk. The next time the computer is switched on, the virus becomes active and starts sending out copies of itself in the user's name.

For protection, install an anti-virus program and update it with the latest anti-virus signature, said Mr Cousins.

He also recommends that users not open attachments from strangers.

Sun is the latest celebrity to have her name abused by virus writers and hackers to tempt users into opening virus files. Other celebrities targeted previously include tennis star Anna Kournikova, actress Julia Roberts and singer Britney Spears.

Political leaders are another popular target.

Recently, the Golten virus tried to bait users into launching it with purported pictures of Palestinian leader Yasser Arafat's funeral.

This worm then tried to gain access to computers connected to it over a local network and plant the virus in them to spread further.

摘自：http://straitstimes.asia1.com.sg/sub/singapore/story/0,5562,286014-1100987940,00.html?

阿顺说：

有时真的不得不佩服骇客的创意创新和与时并进。没关系，等阿顺出了名，就会出现 W32.AhS00N virus 了。到时大家千万不要怪阿顺喔！呵呵！