Security threats Toolkit

SirCam worm snatches FBI documents

Erich Luening, CNet News CNet

Published: 26 Jul 2001 09:23 BST

A researcher at the FBI's National Infrastructure Protection Center -- the bureau's cyberprotection unit -- allowed the rapidly spreading SirCam worm to send private FBI documents from a bureau computer to outsiders, according to an FBI statement on Wednesday.

The computer, which was running virus-scanning software, was being used as part of an ongoing security collaboration with public- and private-sector systems. No other computers in the agency were contaminated.

FBI spokesman Steven Berry said that no sensitive or classified information about continuing investigations was disclosed on Tuesday when the infection occurred.

Upon discovery of the infection, the NIPC worked to contain it but not before a number of documents were sent out. The NIPC, which is in the process of alerting the recipients of the documents to the presence of the worm, subsequently referred the matter to the FBI Washington Field Office for investigation.

The worm, which exploded last week, has continued to infect systems across the world this week.

SirCam spreads by emailing copies of itself to everyone in the infected computer's address book. An added twist with this particular worm is that it sends a random file from the infected computer's hard drive, which means the worm could potentially send confidential business data or embarrassing personal information along with itself.

Is your PC safe? Find out in ZDNet UK's Viruses and Hacking News Section.

Have your say instantly, and see what others have said. Click on the TalkBack button and go to the Security forum.

Let the editors know what you think in the Mailroom. And read other letters.