Social Engineering attacks via IRC & IM

Paul Wilders · Mar 22, 2002

A complete revision history can be found at the end of this file.

Systems Affected

Systems running Internet Relay Chat (IRC) or Instant Messaging (IM) clients

Overview

The CERT/CC has received reports of social engineering attacks on users of Internet Relay Chat (IRC) and Instant Messaging (IM) services. Intruders trick unsuspecting users into downloading and executing malicious software, which allows the intruders to use the systems as attack platforms for launching distributed denial-of-service (DDoS) attacks. The reports to the CERT/CC indicate that tens of thousands of systems have recently been compromised in this manner.

I. Description

Reports received by the CERT/CC indicate that intruders are using automated tools to post messages to unsuspecting users of IRC or IM services. These messages typically offer the opportunity to download software of some value to the user, including improved music downloads, anti-virus protection, or pornography. Once the user downloads and executes the software, though, their system is co-opted by the attacker for use as an agent in a distributed denial-of-service (DDoS) network. Other reports indicate that Trojan horse and backdoor programs are being propagated via similar techniques.

Here is an example of one such message:
You are infected with a virus that lets hackers get into your machine and read ur files, etc. I suggest you to download [malicious url] and clean ur infected machine. Otherwise you will be banned from [IRC network].
This is...
Click to expand...

Read the full story here:

www.cert.org/incident_notes/IN-2002-03.html

Checkout · Mar 22, 2002

I've found a new career! I'm going to hire myself out as a personal firewall to people who want to use IRC and IM. I'll stand behind them, and at appropriate moments, shout "Don't be so &*%^$*£ stupid!" into my client's ear.

I will accept offers of Ventue Capital, beginning now.

Log in or Sign up

Social Engineering attacks via IRC & IM

Paul Wilders Administrator

Checkout Security Rhinoceros

Log in or Sign up

Social Engineering attacks via IRC & IM

Paul Wilders Administrator

Checkout Security Rhinoceros

Useful Searches