Content menu Close

Malware descriptions

Update on new worm

Malware descriptions

minute read

Authors

We have now analysed the new worm (see below) further. It’s actually a new variant of Atak – Email-Worm.Win32.Atak.h. Some variants of this family are similar to some of the Mydoom worms.

Atak.h copies itself to the Windows system directory as dec25.exe

It writes itself to win.ini to ensure that a copy of the worm is launched each time the victim machine is started.

[windows] run=file path dec25.exe

A full description will be available soon.

Authors

Update on new worm

Your email address will not be published. Required fields are marked *

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.

GReAT webinars

From the same authors

In the same category

    • Latest Posts
    Latest Webinars
    Reports

    Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

    Kaspersky GReAT experts dive deep into the BlueNoroff APT’s GhostCall and GhostHire campaigns. Extensive research detailing multiple malware chains targeting macOS, including a stealer suite, fake Zoom and Microsoft Teams clients and ChatGPT-enhanced images.

    Mem3nt0 mori – The Hacking Team is back!

    Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

    Mysterious Elephant: a growing threat

    Kaspersky GReAT experts describe the latest Mysterious Elephant APT activity. The threat actor exfiltrates data related to WhatsApp and employs tools such as BabShell and MemLoader HidenDesk.

    Threats

    Threats

    Categories

    Categories

    Other sections

    © 2025 AO Kaspersky Lab. All Rights Reserved.
    Registered trademarks and service marks are the property of their respective owners.