The W32/Gatt virus was first detected earlier this month. The virus infects all .idc files, a format that is used for scripts for the Interactive Disassembler Pro application that is commonly used by virus researchers to analyse malware.
The specimen that was detected didn't carry any payload. Symantec therefore described the malware as a proof of concept.
"By targeting tools used by antivirus researchers, the author makes an attempt to embarrass the security community," suggested Vinoo Thomas, a research analyst with McAfee.
The Gatt virus isn't the first attempt by malware authors to slow down anti-virus researchers.
Although most professional researchers have the safeguards in place to prevent any serious damage from the virus, Thomas cautioned that it could claim victims amongst wannabe virus writers who are fooling around with the code.
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
_page-0001.jpg&w=100&c=1&s=0)
.png&w=120&c=1&s=0)
Tech in Gov 2025
Forrester's Technology & Innovation Summit APAC 2025
Local Government Focus Day Western Australia
Digital Leadership Day Western Australia
Government Cyber Security Showcase Western Australia
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
