Harry Potter
A new worm is using Harry Potter as a hook

Harry Potter worm claims wizard is dead

Hackers cash in on J K Rowling hype

Robert Jaques

Security experts have warned of a newly intercepted worm that carries its malware payload in a file purporting to be a copy of Harry Potter and the Deathly Hallows.

The Hairy-A worm can automatically infect a PC when users plug in USB drives, which carry a file posing as a copy of the eagerly anticipated book.

Advertisement

If the users have allowed USB drives to 'auto-run' they will see a file called 'HarryPotter-TheDeathlyHallows.doc'. Inside this Word document is the simple phrase 'Harry Potter is dead'.

The worm looks for other removable drives to infect and attempts to create a number of new users on infected computers.

These 'new users' appear as the main characters from J K Rowling's celebrated series, namely 'Harry Potter', 'Hermione Granger' and 'Ron Weasley'.

After logging in, users are shown the following message via a batch file:
'read and repent
the end is near
repent from your evil ways O Ye folks
lest you burn in hell...JK Rowling especially'

"Much of the world is waiting with bated breath for the final Harry Potter novel, and the premiere of the new movie is looming too," said Graham Cluley, senior technology consultant at Sophos.

"There is a real danger that Muggles will blindly allow their USB Flash drives to auto-run and become infected by this worm."

The worm's final trick is that every time infected users open Internet Explorer, they will find their start page has been redirected to a spoof Amazon.com web page selling a book entitled 'Harry Putter and the Chamber of Cheesecakes'.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Harry Potter

Hacker claims theft of Harry Potter manuscript

'Deathly Hallows' spirited away from publisher's PC

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

V3.co.uk Information Overload Summit starts today

We've finally cut the ribbon on V3.co.uk's inaugural Summit event...

Dirk Singer

Comment: Three steps to a social media strategy

Monitor, register and engage, says communications adviser Dirk Singer

rich media

Summit: Is the ECM industry up to the information overload challenge?

In part one of our report, we talk to EMC...

hacker

Summit: UK 'in danger of being left behind' on security

Experts warn behavioural monitoring is essential to protect sensitive data

Primary Navigation