A computer virus, thought to have been created by computer spammers, uses a sinister new trick to harass anti-spam organisations via email.
The Mimail.L virus is spread as an attachment to a lewd email and is compressed to try to dodge anti-virus filters. Once activated, it forwards itself on to every email address stored on an infected machine.
The virus then uses its host to send a torrent of meaningless web traffic to computer servers operated by anti-spam groups including Spamhaus, SPEWS and Spamcop.
Advertisement
These organisations help users cut down on the amount of spam they receive by maintaining lists of known spam servers. If enough machines are infected with the virus these services could be disrupted in a so-called denial of service attack.
Previous variants of Mimail have performed similar tricks. But the new version uses an additional ploy to hassle anti-spammers. If it is unable to send itself on as an attachment, the virus sends a message claiming that the recipient will receive an illegal pornographic CD unless they send an email to cancel the order. The cancellation email address is 鈥渂illing@spamhaus.org鈥�.
Vicious attack
鈥淎bout once every minute we鈥檙e getting an email from an irate person,鈥� says Steve Linford, director of Spamhaus. 鈥淭his is particularly vicious, and it鈥檚 the first time we鈥檝e seen it in a virus.鈥�
Experts believe spammers are increasingly turning to viruses as a means of both sending spam and targeting anti-spam groups.
鈥淭he most likely conclusion is that the writer of this worm is in some way connected with the spamming community,鈥� says Graham Cluley, senior technology consultant for anti-virus company Sophos. 鈥淚t would be wrong for anyone to present this kind of virus writing activity as a harmless prank 鈥� this is clear criminal activity.鈥�
The Mimail variants are all thought to have been developed by the same individual or group. The first version was released in August 2003.