Malware: Archive: February 2004

Worm Spreads Using Random Infected IP Addresses

Security vendor Sophos Friday issued an alert for W32/Nachi-D, a worm that spreads to computers at random IP addresses that are infected with W32/MyDoom-A or are vulnerable to the following Microsoft buffer overflow vulnerabilities: DCOM RPC, WebDAV, IIS5/WEBDAV and Locator Service.

Lawmakers Launch New Anti-Spyware Bill

Proposed legislation bars marketers from secretly installing invasive software.

Security Vendors Continue to Intercept Copies of Netsky Variant

Security vendors Thursday continued to issue alerts for W32/Netsky.C-mm.

AntiOnline Spotlight: SP2 Tackles Windows Security

Months before its official release, AO members weigh in on SP2's security enhancements.

Worms Continue to Wriggle, Wreak Havoc

'Zero-day' exploits and new styles of viruses send security firms scrambling to patch the latest holes in the network.

Work Sends Hyperlink to Contacts to Spread

Computer vendors have issued alerts for W32/Bizex.worm, a worm that spreads by sending a hyperlink to contacts via the ICQ messaging program.

A Baby Step For RFID Privacy

RSA Security makes a move toward letting consumers control their radio frequency identities.

Microsoft Proposes Caller ID for E-Mail

Bill Gates says the 'scourge' of the inbox can be thwarted with a combination of software, hardware and industry participation.

Mydoom Variant Continuing to Infect Systems

McAfee Tuesday raised the risk assessment of the Mydoom.F worm to a medium threat due to increased prevalence.

A Bio Approach to Network Security

HP uses the human immune system as the model for a new security offering.

Viruses Blamed for Expected 80% Spam Saturation by Q3

Spam is expected to make up 80 percent of all email by the third-quarter of this year. And analysts blame it largely on the open proxies created by viruses, like Sobig and MyDoom.

Will Lax Security Trip IP Telephony?

A new research report from META Group suggests that it could.

Mass-Mailing Worm Gathers Email Addresses From Infected Computer

Antivirus vendors issued alerts Monday for W32/Cone@MM, a mass mailing worm that sends itself out as a base64 encoded attachment containing certain information.

How Long Must You Wait for an Anti-Virus Fix?

It can take several hours to more than a day for some security software vendors to issue fixes for known viruses. How does your vendor rate?

Mass-Mailing Worm Performs Number of Actions

Network Associates Friday issued a low-level alert for W32/Mydoom.f@MM a mass-mailing and share-hopping worm that bears a number of characteristics.

Security Forces to Show Unified Front

Homeland Security officials will join experts from Microsoft and other IT firms in San Francisco next week to address the onslaught of malicious attacks.

Linux Kernel Flaws Uncovered

Malicious attackers could gain full super-user privileges, according to a security research firm.

Trojan Attempts DoS Attack on Web Site

Troj/DDosSmal-B is a Trojan that attempts a denial-of-service attack on a web site, according to Sophos, which issued an alert Thursday.

Worm Spreads Via Email, Network Shares

Several security vendors Wednesday issued alerts for W32/Netsky-B, a worm that spreads by email and Windows network shares.

Microsoft Sending Security Patches on a CD

The CD freebie will include all critical updates through October 2003 for users of Windows XP, Windows Me, Windows 2000, Windows 98, and Windows 98 Second Edition.

Flurry of Worms Hits Companies Already on Guard

A handful of smaller worms are loose in the wild, causing a flurry of problems as security and IT managers gear up for what could be a major virus attack.

AOL, EarthLink File Lawsuits Against Spammers

With the federal Can Spam Act so far proving ineffective, ISPs are pursuing aggressive civil actions.

Blaster Type Virus Attack Called 'Imminent'

Exploit code for 'critical' Windows ASN.1 flaw could lead to major network disruption.

Microsoft Patches 'Critical' ASN.1 Flaw

Deflecting Assaults on Privacy

Source code exposed, customer records set free... Browser hijackers and spyware are responsible for these headlines and more. Discover the tools that help keep users, and the networks they reside on, from leaking confidential data.

Doomhunt Worm Targets Computers Infected With Mydoom Worms

Several low level alerts have been issued for W32/DoomHunt-A, a worm that spreads to computers infected with the W32/MyDoom-A and W32/MyDoom-B worms and terminates processes and removes files associated with these worms.

MyDoom Ends but Open Ports Attracting Mutants

Microsoft releases virus removal tool but unpatched drone machines are still a major threat.

Nachi Worm Exploits Security Hole in Microsoft Windows

Several antivirus vendors issued a high-level threat warning Thursday to computer users of a new variant of the Nachi worm (W32/Nachi-B) that attempts to remove infections of W32/MyDoom-A and W32/MyDoom-B, and download Microsoft security patches to unprotected computers.

Worm Performs Multiple Malicious Actions

Symantec Wednesday issued a medium-level threat alert for W32.Dumaru.AH@mm, a multi-threaded, mass-mailing worm that opens a backdoor, runs a keylogger, and attempts to steal personal information.

Pushing Policies at Hotspots

While enforcement of network security polices is growing to be the norm on enterprise networks, it hasn't been the case for remote and mobile workers. Until now.

Buffer Overflows Patched in Oracle 9i Database

Oracle issues a fix for multiple vulnerabilities in its database server software.

Microsoft Patches 'Critical' ASN.1 Vulnerability

Buffer overflows could give malicious hackers complete control of unpatched machines.

New Worm Camouflages MyDoom Writer's Trail

The new DoomJuice worm -- aka, MyDoom-C -- that hit the wild Monday is the equivalent of digital camouflage. It's believed that the MyDoom author created the new worm to mask his trail and stymie potential prosecutors.

Worm Spreads Through File-Sharing Application

W32/Vesser.worm.a is a worm that spreads via the peer to peer file-sharing application Soulseek, and may attempt to spread via the remote access component created by the W32/Mydoom.a@MM and W32/Mydoom.b@MM viruses, according to McAfee, which issued an alert Tuesday.

Malware: Archive: February 2004

Topic Centers

Articles by Type

Contact Us

More Security