[Eug-lug] Bad Bunny (first crossplatform openoffice macro virus)

larry price laprice at gmail.com
Tue May 22 14:27:22 PDT 2007


http://www.zdnet.com.au/news/security/print.htm?TYPE=story&AT=339277689-130061744t-110000005c

The Sophos write up
http://www.sophos.com/pressoffice/news/articles/2007/05/badbunny.html

and this interesting tidbit

    * Windows: The worm drops a file called drop.bad which is then
moved to system.ini in your mIRC folder (if you have one) and also
drops and executes badbunny.js which is a JavaScript virus that
replicates to other files in the folder.
    * MacOS: The worm drops one of two Ruby script viruses (in files
called badbunny.rb or badbunnya.rb)
    * Linux: The worm drops badbunny.py as an XChat script and also
drops badbunny.pl which is a tiny Perl virus infecting other Perl
files.

malware 2.0 ?


More information about the EUGLUG mailing list