MSN Alert 21/01/05

[quicksilver]

Seems you had all better watch your file downloads using MSN

The latest threat comes follows October's Funner worm attack and signals a growing trend to use instant messaging as a delivery mechanism for malicious activity.
According to an advisory from F-Secure, the new W32/Bropia-A worm users MSN Messenger to lure users into downloading one of the following files: "Drunk_lol.pif"; "Webcam_004.pif"; "sexy_bedroom.pif"; "naked_party.pif"; or "love_me.pif."
Once executed, Bropia-A also drops a variant of the Rbot backdoor Trojan. Rbot represents the large family of backdoors fitted with the ability to control a victim's machine remotely by sending specific commands via IRC channels.

See here for details

http://www.eweek.com/article2/0,1759,1753049,00.asp

[battye]

Don't be tricked by *.pif. It may sound like gif, but pif's are executables, not images.