Advertisement
Promo

Security threats Toolkit

Sober worm hits new heights

Dan Ilet ZDNet.co.uk

Published: 09 May 2005 12:45 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The Sober.P worm is circulating the Internet in greater quantities than ever, according to an antivirus company on Monday.

Sophos has reported that the mass-mailing worm now accounts for 5.4 percent of all email and 84 percent of virus activity that the company saw over the weekend. That has risen from Friday's figures, which were 4.65 percent of all email and 77 percent of virus activity.

"The strange thing is that we're actually seeing more reports than ever," said Graham Cluley, senior technology consultant for Sophos. "It's increased and it's even worse than last week. We don't know how many people are infected, but those infected are just spewing these emails out."

Cluley said that the second most prevalent virus, Netsky.P, accounted for 0.3 percent of all email viruses, and Zafi.D, the third most popular worm, was just 0.082 percent. "Those have been big viruses, but have been dwarfed by the Sober worm," he said.

Last week, Sophos said that the worm turned off Symantec's antivirus protection and Microsoft's Windows XP firewall on infected machines.

Sober.P — which security companies have variously tagged as Sober.N, Sober.O or Sober.S — travels as an attachment in emails written in English and German. One of the most widely reported emails contains an alluring message stating that the recipient has won free tickets to the 2006 World Cup in Germany, but many other types have also been spotted. Once opened, the virus sends itself to email addresses harvested from the newly infected machine.

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
78 out of 126 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:




Video icon

Video

Sentry Posts Blog

Authentication risks all too human

Risks to successful online banking identification and authentication using smartcards involve a mixture of human and technological factors, according to the European Network and Information... More

1 comment

Opera censors Chinese content

Opera has updated the Chinese version of its mobile browser to stop users accessing restricted content. Opera Mini was updated on Friday from an international to a Chinese version,... More

2 comments

Symantec website breached

Security company Symantec has said that one of its websites was successfully breached. Romanian security researcher 'Unu' posted details of the breach in a blog post on Monday. Unu... More

Post a comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters