The Register reports that the latest variant of Sdbot-ADD is “being passed through instant messages from members on a user’s Buddy List and within AOL chat rooms.”
The site notes that worm is thoughtfully equipped with rootkit technology designed to slip under anti-virus defenses. It not only loads itself on the target PC and monitors it, but also shuts down anti-virus software and opens a backdoor for future mischief.
IM security vendor Face Time was one of the first to report on the worm. Here’s their take and that of The Register.
Via The Register
