April 07, 2006

Researchers worry over new cross-platform viruses

Security researchers worry that the malicious code may be part of a disturbing new trend of viruses that could infect both Linux and Windows PCs

Hackers have released a sample code for a virus that could infect both Linux and Windows PCs.

The virus, which was given the double name Virus.Linux.Bi.a/ Virus.Win32.Bi.a, was reported Friday by security firm Kaspersky Lab. Security researchers worry that the malicious code may be part of a disturbing new trend of viruses that can run on Windows, as well as other operating systems that have been largely ignored by hackers.

"The virus is written in assembler and is relatively simple," Kaspersky wrote in a posting to the company's Viruslist.com Web site. "However, it is interesting in that it is capable of infecting the different file formats used by Linux and Windows -- ELF and PE format files respectively."

The ELF (Executable and Linking Format) and PE (Portable Executable) file formats are used to format certain types of binary files in Linux and Windows, including the .exe and .dll files used in Windows.

The virus appears to have no practical application, Kasperky said. "It's a classic proof-of-concept code, written to show that it is possible to create a cross-platform virus," Kaspersky said. "However, our experience shows that once proof-of-concept code is released, virus writers are usually quick to take the code, and adapt it for their own use."

The SANS Institutem, a security training organization, agreed with Kaspersky's assessment, saying that the software should come as a warning to Linux and Mac OS X users who may think their computers are "invulnerable" to virus threats.

"As the developers of viruses continue to research this, we will see [more] cross platform malware come about in the future," wrote SANS Internet Storm Center contributor Swa Frantzen, in a Friday Web posting.

"Protecting the Linux, Unix and Mac OS X, machines with antivirus measures is a good thing to start on now if you haven't done so already," he added.

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.