ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


IT Jobs

Security threats Toolkit

Europe threatened by Sober 'epidemic'

Dawn Kawamoto CNET News.com

Published: 04 May 2005 09:25 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The latest Sober worm has spread rapidly in the past 24 hours and now makes up two-thirds of virus traffic on the Internet, according to security experts.

Sober.P, first detected on Monday, now accounts for 77 percent of all viruses detected by Sophos's threat-monitoring stations worldwide, the British security company said on Tuesday. At the same time, Kaspersky Labs, a Russian maker of antivirus software designed to combat such threats, described the worm's spread in Western Europe as an "epidemic".

"This is a pretty significant virus. We usually don't see it spread to 77 percent of all inbound viruses," Gregg Mastoras, a senior security analyst at Sophos, said. "Usually, it spreads much slower, and users have time to update their computers."

Variants of Sober have been circulated since 2003 and have continued to hit corporate and home systems. The mass-mailing worm has continued to spread because people still open attachments in infected email, despite warnings.

The latest Sober offshoot, which has been tagged as Sober.N, Sober.O or Sober.S at other security companies, uses email written in both English and German. One of its lures is a message saying the recipient has won free tickets to the 2006 World Cup in Germany. Once victims open the infected attachment, the virus harvests email addresses from their machine. The virus then copies itself onto the user's computer and then sends a similar email to the harvested addresses.

The World Cup message could account for the rapid spread of the virus in Europe, Sophos said. "Many people will be eager to attend one of the biggest sporting events in the world next year, and may think it's worth the risk of opening the email attachment just in case the prize is for real," Graham Cluley, senior technology consultant for Sophos, said in a statement.

The British company claimed that the worm has "broken records in terms of the number of infected messages sent out and speed of propagation throughout Western European segments of the Internet."

Sober.P may end 2005 as one of the worst viruses. Last year, Netsky.P, which accounted for 22.6 percent of all virus incidents, held that title, according to Sophos.

  • Email
  • Trackback
  • Clip Link
  • Print friendly Print with HP

Did you find this article useful?
25 out of 90 people found this useful


Full Talkback thread

1 comment

  1. Sober.P, what a rubbish name if I made a virus I'd... hack.attack

Company/Topic Alerts

Create a new alert from the list below:





Related Jobs

Websphere Message Broker Consultant

My client, a financial insitution requires a Websphere Message Broker consultant to join their programme. Ideal candidates will have excellent ...

Senior IT Audit Manager - Financial Services

This role may also be expanded to include Western Europe responsibilities if we find the right candidate with language skills and a larger appetite ...

Energy Trading Software Consultant - Western Europe Focused

Working out of their prestigious Central London office, youll be working with global leading energy firms and commodity practices with top tier ...

Sentry Posts Blog

Mobile Linux Better For Mobile Busines...

Mobile Linux Better For Mobile Business Apps? Author: Eric Everson, MyMobiSafe.com As mobile Linux is carving it’s footprint on the future of mobile application development, the... More

Post a comment

DWP downplays security breach

The Department for Work and Pensions (DWP) has admitted that some of its staff have been forwarding passwords with password protected material. An email that was leaked on the 'Dizzy... More

Post a comment

How many headshots does one chairperso...

We got a strange request last week from the head of PR from Russian security experts Kaspersky. It seems although the company was very happy with the interview we recently carried with... More

Post a comment

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.

By: ator1940

Read full story:
RSA: Vendor liability may stifle innovation