Saturday, December 10, 2005

Cracked: Sober Worm Update Scheme

A security firm said it has cracked the Sober worm, and uncovered the URLs the long-running worm will use in January to update itself to a new variant.

Helsinki-based F-Secure is the second vendor this week to claim that it had dug up new information on the two-year-old Sober clan; on Wednesday, Reston, Va.-based iDefense said its research had confirmed the next release date of Sober as Jan. 5, 2006.

F-Secure, however, has identified the Web sites that Sober will use to pull updates to already-compromised PCs, which will, in turn, then spew spam containing the new version.

via the december 9th issue of Tech web

0 Comments:

Post a Comment

<< Home