Security researchers have discovered a new version of it VOBFUS worm. Its latest version can "speak" 21 different languages.
As in previous versions, the WORM_VOBFUS.JDN spreads by copying itself to removable drives, like an executable file. However, unlike previous versions, the names of files that VOBFUS makes depends on the language used by the victim's operating system.
If your system is in English, the files are named like "I love you.exe," "Naked.exe," "Password.exe," "Sexy.exe," and "Webcam.exe."
If the victim's operating system is in another language, then the executable file names are translated. VOBFUS worm is scheduled for the following languages: English, Indonesian, Arabic, Chinese, Bosnian, Czech, Croatian, German, French, Hungarian, Korean, Italian, Polish, Vietnamese and Turkish.
"Local 'infection' could be seen as a way for cybercriminals to turn more unsuspecting users into victims," said Mark Joseph Manahan, a security researcher at Trend Micro.
“Seeing a file or notification written in their language could pique users' interest much more than seeing a file written in English. Users can also get a false sense better safetys in these “local” files and worm shares and could be less suspicious than other files.”
Such tactics are usually used to market its virus police(ransomware), but apparently they are quite effective for other types of malware as well.
