Badbunny

Bad bunny, also known as SB/Bad Bunny-A (Sophos) and StarOffice/Bad Bunny (McAfee), is a multi-platform computer worm written in several scripting languages and distributed as an OpenOffice.org document, commonly named "badbunny.odg",[1] containing a macro written in Star Basic.

This article is about the computer worm. For the ransomware, see Bad Rabbit. For the rapper, see Bad Bunny.

Discovered on May 21, 2007, the worm spreads itself by dropping malicious script files that affect the behavior of popular IRC programs mIRC and X-Chat, causing it to send the worm to other users.[2]

Effects

If the macro is opened from the affected document, it displays the following message: "Title: ///BadBunny\\\" Body: "Hey '[USERNAME]' you like my BadBunny?" and loads one of four different scripts named badbunny.js (JS.Badbunny) under Windows, badbunny.pl (Perl.Badbunny) under Linux/Unix, or either badbunny.rb or badbunnya.rb (Ruby.Badbunny) under Mac OS X.[3] Upon loading, the user is shown a pornographic image of a man dressed as a rabbit having sex with a scantily clad woman in the woods.[4]

References
  1. "OpenOffice macro worm exposes bad bunny". ZDNET. Retrieved 2023-06-28.
  2. "SB/BadBunny-A Win32 worm (IRC-Worm.StarOffice.Badbunny.a) - Sophos security analysis". Archived from the original on 2008-03-28. Retrieved 2009-07-29.
  3. "Perl.Badbunny Symantec". Retrieved 2009-07-31.
  4. "Recognition for malware authors". Naked Security. 2007-05-21. Retrieved 2023-06-28.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.