From: "Rich Gauszka" 

Will BadSheep be next?

http://www.itnews.com.au/newsstory.aspx?CIaNID=52570&r=rss

A newly-discovered worm targeting OpenOffice attempts to download indecent
JPEG images onto compromised Windows, Mac and Linux PCs.

Sophos warned today that Badbunny-A, a macro worm for OpenOffice/StarBasic
that also drops scripts in other languages, downloads pictures of a man
wearing a bunny suit performing a sexual act in woodland.

The malware infects computer users when they open an OpenOffice Draw file
called badbunny.odg

A macro within the file performs different functions depending on whether
the user is running Windows, MacOS or Linux. These can include executing
other self-replicating JavaScript and Perl viruses.

The worm also downloads and displays an image of a scantily clad woman with
a man dressed as a rabbit, irrespective of the operating system being used.

"The group responsible for writing the BadBunny malware does not seem
to have much confidence in it spreading, as it sent the worm directly to
our labs," said Graham Cluley, senior technology consultant at Sophos.

"Hackers have written plenty of StarBasic malware in the past, but the most
'in the wild' this one is likely to get is by displaying a picture of a
'furvert' in the woods.

"This is old-school malware seemingly written to show off and prove a
proof of concept rather than a serious attempt to spy on and steal from
computer users.

--- BBBS/NT v4.01 Flag-5