Zombie PCs infected with the NetSky-Q worm are set to launch distributed denial of service attacks against P2P and warez sites tonight.
The worm will attempt to flood the main Web sites of KaZaA and eDonkey with spurious traffic between 00:01 8 April and 11 April (time taken from system clocks). Other sites including www.cracks.st, www.cracks.am and www.emule-project.net are also targeted for attack. File-sharing networks themselves won’t be affected by the worm, only access to Web sites.
NetSky-Q, which first appeared on March 29, includes a message from the virus authors embedded within its code. The previously unknown “SkyNet Antivirus Team” from Russia claim they are educating users, and want to prevent hacking and sharing of illegal content.
Between April 14 and April 23 a much rarer worm – NetSky-T – will launch a fresh wave of attacks against a similar set of sites: cracks.am, emule.de, kazaa.com, freemule.net and keygen.us. A few copies only have this low-risk virus have escaped onto the Net, so the consequence are likely to be limited.
Targeted sites have already begun to make preparations in advance of the anticipated onslaught.
Related Posts
- KWBot worm hits KaZaA
- Potter-mania fuels pesky virus
- W32.Benjamin.Worm on KaZaA
- Kazaa Protector: Make Kazaa safer
- New worm/Trojan: Kazoa.C Spreading fast thourgh Kazaa and IRC

