> Certainly an interesting if not original vector. Sophos has more info:-
>
> http://www.sophos.com/security/analyses/sbbadbunnya.html
"SB/BadBunny-A spreads by dropping malicious script files that affect the
behavior of the popular IRC programs mIRC and X-Chat, causing them send
SB/BadBunny-A to other users. These malicious script files are named
badbunny.py (for XChat) and script.ini (for mIRC, overwriting the existing
mIRC file) and are also detected as SB/BadBunny-A."
So it'll be defeated by SELinux, then...
Vic.
