[ insider_reports_insider ]
Competing Virus Writers Engaged In Botwar
Jim Hedger
Contributing Writer
2005-08-18
 Insider Reports RSS Feed
Tired of simply taking down systems for fun and status, three sizable and organized gangs of virus writers appear to be in a death-match competition for total supremacy in their misanthropic endeavors.
 | | Prepare for battle! |  |
Over the past week, variants of three unique worms, "Zotob", "Bozori", and "IRCbot" started to shut down systems at several major media outlets and businesses around the world, but particularly in the United States on Tuesday. In a statement posted to the F-Secure website earlier today, chief security researcher, Mikko Hypponen, noted the bots now seem to be attacking each other.
"We seem to have a botwar on our hands," said Mr. Hypponen who works for the Scandinavian software security firm. "There appears to be three different virus writing gangs turning out new worms at an alarming rate - as if they would be competing who would build the biggest network of infected machines. The latest variants of Bozori even remove competing viruses like Zotob from the machines!"
The worms appear to be primarily attacking systems running un-updated versions of Windows 2000 without a firewall. Larger organizations are likely infected by their own employees who take their laptops home, reconnecting to the internal system the next day.
According to Mr. Hypponen's statement, "This worm replicates by scanning machines at port 445/TCP and, when a victim is found, uses the exploit code to download the main virus file via ftp. At this point it sets up an ftp server on the infected machine and starts scanning for more targets continuing its spread."
For more information on this outbreak and advice (as it becomes available) on how to deal with it, please visit the F-Secure Blog at http://www.f-secure.com/weblog/.
About the Author:
Jim Hedger is the SEO Manager of StepForth Search Engine Placement Inc. Based in Victoria, BC, Canada, StepForth is the result of the consolidation of BraveArt Website Management, Promotion Experts, and Phoenix Creative Works, and has provided professional search engine placement and management services since 1997. http://www.stepforth.com/ Tel - 250-385-1190 Toll Free - 877-385-5526 Fax - 250-385-1198
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
