 
  See your link here
|
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
New variant of Sober worm infecting PCs worldwide
or
Other Spam, Malware and Vulnerabilities Stories
|
|
|
|
May 3, 2005 (Computerworld) --
A new incarnation of the W32/Sober computer worm is spreading in large numbers across the Internet since yesterday, infecting home and business PCs around the globe.
Infections from the latest W32/Sober worm, which was given different names by various antivirus software vendors, began about noon Eastern time yesterday and have been bombarding machines with e-mails generated internally by the worm, according to alerts from vendors.
Richard Wang, manager of the Lynnfield, Mass.-based virus lab of Sophos PLC, said the W32/Sober-N worm accounts for about 70% of all the virus reports the company has received since yesterday. The worm is sent to a recipient in an e-mail and is only activated if the recipient clicks on the enclosed file attachment. The file payload then searches for all e-mail addresses on the infected computer and sends a copy of itself to each address. The e-mails are sent out until the worm is eradicated, Wang said.
In English-speaking countries, the fake e-mail notifies the recipient that someone has obtained his account and password information for an unnamed account and tells the user to click on the attached file to find out what information has allegedly been stolen. In German-speaking countries, the fake e-mail tells the recipient that he won tickets to the upcoming 2006 Soccer World Cup events. The attached files are named mail_info.zip, account_info.zip or our_secret.zip and sometimes also include the word "error" in the file name.
"It's pretty normal in terms of what worms do," Wang said. "What's unusual about it is the sheer volume it has at the moment."
Wang said he had no statistics on the number of infections the worm has caused so far, nor on how many e-mail messages are carrying the worm.
Sophos and other major antivirus vendors have already updated their antivirus software to prevent the worm from getting into a PC and have created tools to remove it once a machine is infected, Wang said. "You do need to get rid of it once you get it; otherwise it will just slow you down," he said.
Moscow-based antivirus vendor Kaspersky Lab has issued a similar alert about what it called the Win32.Sober.p worm, which it said is hitting hard in Western Europe.
In an e-mail alert, the lab said the new Sober.p worm was first detected yesterday and has "broken records in terms of the number of infected messages sent out and speed of propagation throughout Western European segments of the Internet."
Sober.p also spreads as a .zip attachment in an e-mail, according to Kaspersky Lab.
Antivirus software vendor Symantec Corp. said in a statement that the W32/Sober-N worm, which it calls W32.Sober.O@mm, apparently
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
 |
| All Zones Application Performance Zone Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone Windows Protection Zone The Enterprise Search Zone Software as a Service Zone The Security Zone |
|
See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
Moving to Windows Vista: The Promise, The Reality
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Download this white paper today!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
- 'Experimental' security fix is malware, Microsoft says
- 16 e-mail and instant messaging boosters
- Tough economic climate can heighten insider threat
- More top stories
 The Security Zone
Securing your network begins at the gateway, also called the perimeter, to keep unauthorized users, viruses and malicious code from entering your systems. Deploying multilayer technologies is your first line of defense. With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. One of the key facets of a successful security strategy is protecting the servers that run critical applications and house so much of your essential data. Having the right policies, procedures and server configurations is critical. Learn more in The Security Zone See All Zones
|
 Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.New baits 
|
|
|
Seth Weintraub:
Apple Macbook Event Liveblog
I'll be liveblogging here when the event begins. That's scheduled for 1 p.m. EDT. ... [more]
|
