Akonix Security Center Identifies New IM Worm With International Attacking Capabilities; Latest Virus Indicates the Advanced and Inventive Methods Now in Use by Virus Writers

Business Wire, August 24, 2005

SAN DIEGO -- Akonix Systems, Inc. today identified a new variant of the Kelvir instant messaging (IM) worm named Kelvir.HI, propagating over a leading public IM network. This is the first worm ever identified that intelligently checks the system settings of an IM client and sends a message in the appropriate language. The Akonix Security Center classified the worm as low risk and immediately used the industry's only real-time IM malware, SPIM and protocol update system to automatically push updates to customers for protection against this threat.

DESCRIPTION:

Kelvir.HI works by downloading a copy of the previous W32.Spybot worm and tracking down the default language, sending a message in either English, Spanish, Dutch, French, German, Greek, Swedish, Italian, Portuguese or Turkish. Once users click on the link in the message, a copy of the Spybot worm is automatically downloaded to their computer. Spybot is a backdoor program that, among other malicious activity, can end security applications, log keystrokes and receive remote commands.

To learn more about the Kelvir.HI worm, please visit the Akonix Security Center at http://www.imsecuritycenter.com.

PREVENTION:

For Akonix L7 Enterprise customers, systems are automatically configured to download and install the latest updates to the Akonix SPIM & Malware Filter, and no IT intervention is required. Akonix L7 Enterprise is the industry's only IM security system that combines dynamically updated IM security policies and integrated anti-virus scanning to provide the most comprehensive protection for corporate networks from IM-based attacks.

For other organizations, it's recommended to ensure all desktop computers are updated with the latest security patches, and that all public IM use is appropriately blocked or managed.

ADDITIONAL INFORMATION:

Akonix Security Center experts are available to comment on the Kelvir.HI worm and other real-time security risks. Representatives are able to discuss the rise in IM threats during 2005, based on the increased use of IM for business critical communications.

Akonix recently released its July 2005 IM Threat Watch report, which tracked 42 new enterprise threats targeting IM systems, a 24% increase over the previous month. To receive a copy of the report, please email akonix@lewispr.com.

For more information about the Akonix Security Center, or to sign up for IM security alerts, please visit www.imsecuritycenter.com.