More on the phishing worm I mentioned in a previous post. Mikko H. Hypponen of F-Secure has passed on a little more information. He says it’s “pretty big, but still far away from outbreaks like Sasser or Mydoom”. So far “at least 50,000 machines are infected worldwide, possibly more”. He says Korgo does “specifically target… Read More »
German police on Friday arrested two men: an 18-year old man in Rotenburg in connection with the Sasser worm, and a 21-year old who confessed to creating a bot called Agobot or Phatbot. A lot of folk believe the gang responsible for the Sasser worm may also be responsible for the Netsky worms, which have… Read More »
Just how bad was Sasser? Here’s a list, courtesy of F-Secure, of places and companies affected by the worm: County hospital in Lund, Sweden (5000 computers and X-ray equipment offline) European Commission in Brussels (1200 machines offline) Coastguard in UK (19 regional offices offline) British Airways in UK (flights delayed) Westpac Bank in Australia (offices… Read More »
Four years after LoveLetter, there’s a new worm out, and it looks bad. Panda Software says Sasser “has positioned itself as one of the quickest-spreading and virulent ones”. Already two variants of the worm are out, according to F-Secure. Panda says the worm uses a trick that “means practically all Microsoft systems will be affected,… Read More »
Can we really keep out worms? An interesting piece from Information Security Magazine takes a look at a range of “antiworm” products which promise to contain worms by weeding out bad traffic. Among them: Mirage Networks, ForeScout, Check Point Software Technologies, Silicon Defense and IBM. They use different approaches, from looking for unfulfilled Address Resolution Protocol… Read More »