THE HACKER claiming credit for the 'Here you have' Trojan, written as a blow against the invasion and occupation of Iraq, might be located in Spain.
The malware writer styling himself as representing the 'Iraq Resistance' claims to have unleashed the Trojan in response to US actions in Iraq and threats from an evangelical preacher to burn copies of the Qur’an.
The old-school virus, which targeted Windows systems via malicious links in spam emails, caused some concern when it started circulating last week, infecting computers at the US space agency NASA, media groups including ABC/Disney and others.
In keeping with the virus’s outmoded method of propagating, the Youtube video posted by Iqziad, who claims to represent the "Iraq Resistance – Leader of Tarek Bin Ziad Group", has a certain old world charm.
The video’s synthesized vocal track and tourist-brochure shot of Andalusia hark back to the days before Xtranormal, when sound effects of a braying horse and random clicks were all that were needed to make anonymous online videos truly terrifying, if only for their horrendously bad taste.
The video was spotted by researchers at security group Pandalabs, who have shared their information with Spanish police.
But it’s not just the group’s name that tipped the Panda researchers off about a potential Spanish connection - Tarek ibn Ziad led the eighth century Muslim invasion of the Iberian peninsula.
In addition, “Certain aspects of the virus code” also suggest it may have originated in Spain, says Luis Corrons, technical director of PandaLabs. He didn't elaborate but it would be nice to think that the malware code included an Ascii art depiction of the World Cup trophy. µ