Advertisement
Promo

Security threats Toolkit

One virus writer 'responsible for 70 percent of infections'

Munir Kotadia ZDNet.co.uk

Published: 28 Jul 2004 17:35 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Sven Jaschan, self-confessed author of the Netsky and Sasser viruses, is responsible for 70 percent of virus infections in 2004, according to a six-month malware round-up published by antivirus firm Sophos on Wednesday.

Jaschan was taken into custody in May by the police in Lower Saxony, who said that he had admitted programming both the Netsky and Sasser worms, something that experts at Microsoft confirmed. During the five months preceding his arrest, there were at least 25 variants of Netsky and one of the port-scanning network worm Sasser.

Graham Cluley, senior technology consultant at Sophos, said it was staggering that one person could be responsible for so many infections. Richard Starnes, president of security industry group ISSA UK, was also impressed: "Is he going to put this on his CV?" he asked.

Cluley said there is still a chance that others may be implicated in the Netsky virus, although so far no one else has been arrested.

"The full story of the Netsky gang isn't known yet. We know some of his fellow students have been questioned, but the real motives are not fully known," said Cluley.

According to Sophos, the Sasser worm came out on top with 26.1 percent of infections, while Netsky.P, Netsky.B and Netsky.D take second, third and fourth places respectively. The only non-Jaschan viruses in the top ten are MyDoom.A (fifth place), Zafi.B (sixth place), Sober.C (ninth place) and Bagle.A (tenth place).

"Sasser may have taken top spot, but six of the biggest viruses of the last six months were Netsky and Bagle variants -- these caused a continued nuisance for PC users the world over as their authors entered into a very public game of virus writing one-upmanship," said Cluley.

Starnes said that although Jaschan has been arrested, there are always other people willing to step into his shoes.

"Virus writers tend to grow out of the hobby, but hackers do not tend to stop. There is a high turnover rate in the virus writing community. There will always be somebody there to step in to fill the gap," he said.

Cluley agreed, but pointed out that organised criminals are increasingly getting involved in virus writing and are less likely to be caught because they tend to be more careful.

"There is a greater criminal element in virus writing than ever before. If you are an organised gang making money out of viruses and hacking, you don't go around bragging or having a playground scuffle that results in one of your number grassing you up to Microsoft," said Cluley.

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
109 out of 212 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:









Video icon

Video

Sentry Posts Blog

Opera censors Chinese content

Opera has updated the Chinese version of its mobile browser to stop users accessing restricted content. Opera Mini was updated on Friday from an international to a Chinese version,... More

2 comments

Symantec website breached

Security company Symantec has said that one of its websites was successfully breached. Romanian security researcher 'Unu' posted details of the breach in a blog post on Monday. Unu... More

Post a comment

Campaigners criticise '£10bn NHS IT ov...

The National Health Service's flagship IT project has been criticised by a tax campaign group for running billions of pounds over budget. The NHS National Programme for IT (NPfIT)... More

2 comments


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters