First virus targeting AMD64 chips spotted

By , on

Symantec may have discovered the first proof-of-concept virus targeting AMD's 64-bit processors.

Dubbed Shruggle, the virus is similar to Rugrat, another proof-of-concept bug that in late May put Windows' 64-bit operating systems in its sights.

Like Rugrat, Shruggle doesn't spread from one machine to another. It can only infect one system at a time, appending itself to 64-bit executable files.

The virus is written in AMD64 assembly code, said Symantec analysts in the US, and so won't run on 32-bit editions of Windows, such as Windows XP and Windows 2000.

"Shruggle is a fairly simple proof-of-concept virus," said Oliver Friedrichs, senior manager of Symantec's virus response team. "Showing that the AMD platform is just as susceptible to attack as any other platform."

Shruggle couldn't do any damage even if it was released in the wild, since the 64-bit versions of Windows that it attacks won't be formally released until sometime in the first half of 2005.

"This is a growing trend of malicious code authors," said Friedrichs. "They're branching out to other platforms, like the embedded device market, and they're getting an early start on coming up with attack vectors on new technologies."

Other proof-of-concept viruses have popped up in recent months, exploring vulnerabilities in not only Windows 64-bit - which will be called Windows x64 - but also Windows CE.

Friedrich said it was too early to tell whether Shruggle is the work of the same hacker or group of hackers as Rugrat and other recent proof-of-concept viruses.

Got a news tip for our journalists? Share it with us anonymously here.
Tags:

Log in

Email:
Password:
  |  Forgot your password?