Advertisement
Promo

Security threats Toolkit

Pro-Palestinian virus hits Israeli firms

Robert Lemos, ZDNet News ZDNet.co.uk

Published: 20 Mar 2001 11:35 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

A handful of companies have been hit by a computer virus named Injustice that causes a victim's computer to send pro-Palestinian messages to 25 Israeli organisations and government agencies.

The worm is largely benign and does not damage data on the infected PC, but the flurry of emails its sends to other computers could swamp a business' network, said Ian Hameroff, business manager for security solutions at antivirus and PC services company Computer Associates.

"It is spreading at a medium rate, nowhere near epidemic," he said. "The interesting thing is its usage as a vehicle for a political message."

Rival antivirus firm Trend Micro rated the virus as a medium threat.

The mass-mailing worm represents the latest strike in the online battle between supporters of the Palestinians and those of the Israelis. Late last year, both sides traded blows by defacing Web sites that support the opposing side.

While other political viruses have been seen in the past, Injustice has the potential to be the most effective to date.

The virus appears as an attachment to an e-mail message with the subject line "RE: Injustice" and the following message:

Dear (Outlook User name)/ Did you send the attached message, I was not expecting this from you!

The worm is a Visual Basic script attachment called INJUSTICE.TXT.VBS. Once opened, the program will display an anti-Israeli message in a text dialogue box.

"PLEASE ACCEPT MY APOLOGIES FOR DISTURBING YOU," states the message. "Remember that one day YOU may be in this situation. We need every possible help." The rest of the message describes the death of a 12-year-old Palestinian boy.

The virus sends itself in email messages to the first 50 entries in the infected computer's Outlook address book, along with 18 Israeli government addresses, eight organizsations and to the Webmaster of the country's official Web site.

Finally, Injustice uses Microsoft's Internet Explorer to open six windows to a variety of Web sites, including an electronic petition to the United Nations High Commissioner for Human Rights.

"I've had people send me email to get me to sign a petition," said Susan Orbuch, spokeswoman for Trend Micro. "But I've never seen a virus that tries to get people to sign a petition." Trend Micro calls the virus VBS_Staple.A.

The virus writer apparently tried to make the virus as harmless as possible.

"Note: Do not worry," he states in the text of the virus. "This is a harmless virus. It will not do any thing to your system. The intension (sic) is to help Palestinian people to live in PEASE (sic) in their own land."

Have your say instantly, and see what others have said. Click on the TalkBack button and go to the ZDNet News forum.

Let the editors know what you think in the Mailroom. And read what others have said.

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
58 out of 113 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:








Video icon

Video

Sentry Posts Blog

Authentication risks all too human

Risks to successful online banking identification and authentication using smartcards involve a mixture of human and technological factors, according to the European Network and Information... More

1 comment

Opera censors Chinese content

Opera has updated the Chinese version of its mobile browser to stop users accessing restricted content. Opera Mini was updated on Friday from an international to a Chinese version,... More

2 comments

Symantec website breached

Security company Symantec has said that one of its websites was successfully breached. Romanian security researcher 'Unu' posted details of the breach in a blog post on Monday. Unu... More

Post a comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters