First Openoffice Virus Emerges:

[Guest Reimar]

If someone talked about the "virus free" Open Office and not for the PC only but for Linux and Mac as well, should know that this time is over!

The first discovered Virus for Open Office and here for all system, found.

"Oh what a sweet, sweet day it must be for Microsoft. The first worm specifically targeting the open-source office package OpenOffice has emerged.

It runs on Windows, Mac and Linux computers, but anti-malware vendor Sophos admits it poses a low threat, especially as it's only a proof-of-concept that hasn't actually been discovered 'in the wild'.

The OpenOffice worm uses the inbuilt StarBasic scripting language in the office suite to save script to disk in several other languages.

The worm attempts to download and display an indecent JPEG image of a man wearing a bunny suit performing a sexual act in woodland."

Read the full story here

[Phil Conners]

So what does that make the score? OSS:1, Microslush:10,000 ?

[cdnvic]

Well, just let me delete OO, and go pay out hundreds for Office. Wait, that would be stupid when every decent antivirus' heuristics will catch this is they haven't already added it to their signature files.

"The group responsible for writing the BadBunny malware doesn't seem to have much confidence in it spreading, as it sent the worm directly to our labs. The hackers have written plenty of StarBasic malware in the past, but the most 'in the wild' this one is likely to get is by displaying a picture of a furvert in the woods," said Graham Cluley, senior technology consultant for Sophos. "This is old-school malware - seemingly written to show off and prove a proof of concept rather than a serious attempt to spy on and steal from computer users." Sophos

Aside from advertising that there's a free office suite out there that does as good a job as MS office, and is far superior to Google's online offering, that has only had two vulnerabilities discovered in the last seven years, I see no advantage to Microsoft. If anything, it's a non-issue.

Why would you say "Just a beginning"?

Are you hoping Open Office users get more and more Malware?

I'm not one to jump on the MS hating bandwagon but to cheer on the malware authors to make MS look better is taking fanboy-ism to a sick level.

Edited May 22, 2007 by cdnvic

[Richard-BKK]

On Linux the worm drops badbunny.py as an XChat script and also drops badbunny.pl what is a Perl script. Are there still people who use Xchat on Linux computers, I can remember that I used it somewhere in the early years of Linux.

And the chance that an alien Perl script would be executed is very small, if not impossible. Because even as a Perl script has file extension of .pl it still need to be changed to executable status.

[cdnvic]

On Linux the worm drops badbunny.py as an XChat script and also drops badbunny.pl what is a Perl script. Are there still people who use Xchat on Linux computers, I can remember that I used it somewhere in the early years of Linux.

And the chance that an alien Perl script would be executed is very small, if not impossible. Because even as a Perl script has file extension of .pl it still need to be changed to executable status.

I stick with the old standards. x-chat and ircII-Epic

[Guest Reimar]

cndvic wrote:

Why would you say "Just a beginning"?

Are you hoping Open Office users get more and more Malware?

I was just wondering that it was take so long time! And it's for sure just a matter of time that there will be more and more malware, trojans, spy's and virus on other systems than Windows based!

What I hoping (hopeless) is that they cush that people who delivers that "da*n" software!

Edited May 23, 2007 by Reimar

[dave_boo]

On Linux the worm drops badbunny.py as an XChat script and also drops badbunny.pl what is a Perl script. Are there still people who use Xchat on Linux computers, I can remember that I used it somewhere in the early years of Linux.

And the chance that an alien Perl script would be executed is very small, if not impossible. Because even as a Perl script has file extension of .pl it still need to be changed to executable status.

I stick with the old standards. x-chat and ircII-Epic

Bah, irssi is where it's at! Although for when inside an x session I'll run Gaim(oops sorry, Pigdin) just because it incorporates all sorts of protocols.

But I'll agree, it looks like more FUD. Remember the row when they found a remotely exploitable buffer overflow in OpenBSD? And that was only the second one in over 10 years!

[cdnvic]

...and even then it required the target to be extraordinarily receptive in the first place.

[Phil Conners]

cndvic wrote:

Why would you say "Just a beginning"?

Are you hoping Open Office users get more and more Malware?

I was just wondering that it was take so long time! And it's for sure just a matter of time that there will be more and more malware, trojans, spy's and virus on other systems than Windows based!

What I hoping (hopeless) is that they cush that people who delivers that "da*n" software!

Are you long MSFT by chance?