Storm Worm variant targets blogs, bulletin boards

A variant of the trojan horse known as Storm Worm emerged last Monday, targeting people who post blogs and notices to bulletin boards, CNET reports.

The new Storm Worm variant attacks the machines of unsuspecting users when they open an e-mail attachment, click on a malicious e-mail link or visit a malicious site.

But the twist comes when these people later post blogs or bulletin board notices. The software will insert into each of their postings a link to a malicious Web site, said a security expert, who rates the threat as “high.”

The danger in this most recent case, he added, is that the user is actually posting a legitimate blog or bulletin board notice, unaware that a malicious link has been slipped into the text of the posting.