MyDoom strikes again

net1

MyDoom.S, a new variant of the MyDoom worm discovered on Tuesday, downloads malware from an MP3-downloading site and a personal Web site. Security experts claim that hackers have compromised these sites by exploiting scripting vulnerabilities in their guestbooks, ZDNet UK reports.

Security company F-secure is trying to close down the hacked sites but has not yet managed to contact the US-based site administrators or ISPs hosting the threat. F-Secure warned that until the sites are brought down and the security holes closed, MyDoom.S will continue to cause problems.

F-secure recommends that users protect themselves by setting their firewalls to block the URLs of the compromised Web sites, w w w.richcolour.com and w w w.zenandjuice.com.