OpenOffice worm downloads bunny porn

 

A newly-discovered worm targeting OpenOffice attempts to download indecent JPEG images onto compromised Windows, Mac and Linux PCs.

Sophos warned today that Badbunny-A, a macro worm for OpenOffice/StarBasic that also drops scripts in other languages, downloads pictures of a man wearing a bunny suit performing a sexual act in woodland.

The malware infects computer users when they open an OpenOffice Draw file called badbunny.odg

A macro within the file performs different functions depending on whether the user is running Windows, MacOS or Linux. These can include executing other self-replicating JavaScript and Perl viruses.

The worm also downloads and displays an image of a scantily clad woman with a man dressed as a rabbit, irrespective of the operating system being used.

"The group responsible for writing the BadBunny malware does not seem to have much confidence in it spreading, as it sent the worm directly to our labs," said Graham Cluley, senior technology consultant at Sophos.

"Hackers have written plenty of StarBasic malware in the past, but the most 'in the wild' this one is likely to get is by displaying a picture of a 'furvert' in the woods.

"This is old-school malware seemingly written to show off and prove a proof of concept rather than a serious attempt to spy on and steal from computer users.

"A financially motivated hacker would have targeted more widely-used software and been more discreet in their use of imagery."

Copyright ©v3.co.uk


OpenOffice worm downloads bunny porn
 
 
 
 
 
Top Stories
Telstra shifts BigPond email to Windows Live
All data to be migrated to Microsoft cloud.
 
Windows 8: Under the hood
Part One of iTnews' enterprise guide to Windows 8.
 
iTnews on tour: The Executive Summit Series
Join us in Sydney and Melbourne to meet Australia's tech leaders.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Would you be concerned about your business' email data being hosted offshore?

   |   View results
Yes
  87%
 
No
  13%
TOTAL VOTES: 95

Vote