A malicious Javascript worm adds a link to a porn site on emails coming from infected users' machines, AV firms have warned.
JS.Fortnight drops a file on a victim's Windows PC which is then inserted into the default signature for Outlook Express. Every time the infected computer sends an email message, the message will contain the malicious code.
JS.Fortnight also changes the home page of browsers on infected computers to rawtocash.net, and adds this site (which appears to have been pulled) to a user's favourites menu. Suspicion for the creation of the worm has fallen on scam artists who are probably using it as a ploy to attract traffic to particular sex sites.
|