Indian cyberspace under attack from new Trojan, Beebone

Indian cyberspace is apparently under attack from a new Trojan . Called ‘Beebone’, it reportedly works its way into the host computer by faking its identity to gain ‘privileged access’, and then deploying ‘smart and corrupt’ techniques against it. Computer users in the country are being warned against the deadly virus, and to ensure that their systems are protected against an attack from it. According to a report in Economic Times, the new virus is so lethal that it “acquires as many as 20 aliases or masks to infect and attack a vulnerable computer system which is low on security features.” “It has been observed that new variants of Trojan win32/Beebone are spreading widely. This is a Trojan downloader family which silently downloads and installs other malware and programs without user consent,” an advisory issued by the national Internet and computer security sleuths organisation, the Computer Emergency Response Team-India (CERT-In), said. [caption id=“attachment_982067” align=“alignleft” width=“380”]  Representational photo. Reuters[/caption] So what should you do to avoid the Beebone virus? The agency recommends being very cautious while using external/removable storage devices, disabling autorun functionality in Windows, keeping up-to-date patches and fixes on the operating system and keeping your anti-virus software updated. Besides this, make sure your password is strong and don’t stay away from pirated software. And if you’re computer already has the virus, there’s still a simple way to get rid of it. Crazyengineers.com suggests downloading Kaspersky’s TDSSKILLER . After it has been downloaded, rename the TDSSKiller.exe to iexplore.exe, then double-click and run it. On-screen instructions should be followed, and then scan your system.

CERT has provided a list of aliases that the malware is known to take on: Trojan.Win32.Jorik.Fareit.qru (Kaspersky), W32/Autorun.worm.aaeh!gen (McAfee), W32/VobFus-BX (Sophos), Trojan horse ( Symantec), Trojan-FBZZ! 41E0B7088DD9 (McAfee), Trojan.Win32.SelfDel.aqhh (Kaspersky), Trojan.Win32.Jorik.Fareit.qsl (Kaspersky), Beebone-FMQ! 039FA2520D97 (McAfee), W32.Changeup! gen40 (Symantec) and Worm.Win32.Vobfus.dxpf (Kaspersky).

 with inputs from PTI