10 Apr 2006
Security vendor Kaspersky Labs has uncovered a proof-of-concept virus that is able to infect both Linux and Windows systems. The security company refers to the online pest as Virus.Linux.Bi.a/ Virus.Win32.Bi.a.
While the virus is capable of infecting files on both platforms, it infects files only in the current directory. Most importantly, it does not cause any actual harm to infected systems and does not self-propagate.
The ability to infect Linux systems limits the virus in its attempt to cause harm, according to David Perry, global education director with antivirus vendor Trend Micro.
Users need to manually download and open the file to become infected and, since Linux is mostly used on servers, few users on that operating system will pick up the virus.
"There would be more to gain by attacking Windows and Mac OS X rather than Windows and Linux because there are more desktops available on OS X," Perry told vnunet.com.
"This is an interesting milestone, but no reason to sell the farm. Nobody has to stay up late tonight."
The code could spark the creation of more cross-platform viruses, however, as the author has, in a sense, blazed a new trail.
"This is written in an assembler so we know it's written by a programmer, as opposed to a lot of other [malware]. The gauntlet is down. Somebody has proof that they can write a virus for two operating systems," said Perry.
The virus appears to be written by a traditional malware author who is showing off his programming skills rather than creating malware for financial gain.
The virus leaves a text string in infected files that refers to the Immortal Riot, an online publication where virus authors posted proof-of-concept code between 1993 and 1996.
Latest stories from Security
Related articles
Related jobs
Poll
What will be the biggest change to corporate technology in the future?
TFL director of Games transport Mark Evers discusses how the public transport network is preparing for this summer's event
Connect with V3.co.uk
The wrong printers, for the wrong tasks on the wrong contracts
Who leads the BI pack and who should we be watching out for?
PHP developer - CSS, HTML, Javascript, MySQL, Linux...
Senior BPM Developer (Java, J2EE, Agile, Spring, Struts...
As a Business Analyst you will play a key role in understanding...
C#/ASP.NET Team - Gloucester - My client has an urgent...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Just a thought, I could be wrong.
Good article, but this is not the first time a virus was able to run under both Windows and Linux. Technically I think the title "New virus hits Windows and Linux" is a little misleading and here is why. The virus is written in assembly which means while the virus runs in both Windows and Linux the virus IS platform dependent. If this is like the other virus written a few years ago, the virus only runs on Intel x86 machines. In other words, the virus does NOT run under Windows and Linux but rather under Windows or Linux running on an Intel x86 machine. Which makes me wonder, would the virus run on the Intel Mac? The reason I say that is, unless I am mistaken, in assembly the programmer does not rely on OS dependent functions like printf but instead commands the CPU with commands like move so if the Intel Mac has the same Intel x86 architecture and instruction set as typical Intel PCs, it is hypothetically possible that the virus could execute on a Mac. What do you think? Thank you for your time. Have a nice day :)
Posted by: Michael Tourigny 11 Apr 2006