Virus writers are exploiting the image of Santa Claus to trick users of America Online, Microsoft MSN, and Yahoo instant messaging systems into clicking on files containing dangerous software.
According to the American security firm IMLogic, the IM.GiftCom.All worm will make people think they have just received a link containing a Christmas greeting file.
Those who click on this file will see an image of Santa Claus, unaware that a rootkit program has quickly infiltrated their computer system. A rootkit is a tool designed to operate undetected by security software and has recently begun appearing on instant messaging networks. It will take control and assist the attacker in spreading messages to other addresses.
The worm can spread rapidly through instant messaging networks as it disguises itself in messages that appear to be from friends in the contact list. “IM.GiftCom.All has an average propagation rate, but in terms of potential damage to the system, it proves to be much more dangerous,” IMLogic warns.