Cable Forum - Korgo worm

Cable Forum (https://www.cableforum.uk/board/index.php)

- Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)

- - Korgo worm (https://www.cableforum.uk/board/showthread.php?t=13184)

Quote:

Korgo worm targets bank accounts

Extreme phishing

By Nick Farrell: Thursday 03 June 2004, 10:18

A NEW WINDOWS worm that steals online banking information, and secretly transmits it back to its creators has been spotted in the wild.
The Korgo worm uses holes in the patchwork quilt which is Windows, despite the fact that the hole was patched by Vole in April. According to a spokesman for F-Secure the worm keeps spreading and it's aggressively stealing user information from infected machines. It does this via a keylogger, which specifically collects user logins for online banks.

It also logs everything the user types to any web form - this will collect lots of credit card numbers and passwords. The spokesman warned that anyone who had been infected by Korgo, to change their passwords and cancel their credit cards.

Although the hole that Korgo exploits was fixed in Microsoft's megapatch release, many users have had problems installing it.

Link

me runs off to update :disturbd: :disturbd: :disturbd: :disturbd:

:mad: which megapatch??? eeek

Frankly this name got me thinking about those Japanese godzilla films.

I can't find any critical updates for ME.Tell me does this actually affect ME users?

Incog. :)

Quote:

Originally Posted by Scrubbs

:mad: which megapatch??? eeek

One of those in the Forum Announcement I would guess.

I've just done my windows update and there was nothing critical.

phew

To get round the issue of keyloggers working on my systems (never had one and hope I never will) I use Roboform to fill in username and password details. What Roboform fills in though is not the actual username and password but only a part of it which I manually add to in order to get the correct details. This is double cover in that there is no record on my system of the actual usernames and passwords and a keylogger or anyone savvy enough to be on my system and looking for details cannot determine them either (I hope).

So I would be correct in assuming that ME users should not panic.