[ news_security_news ]
Botwars Go Ballistic: Worms Crawling In And Out
John Stith
Staff Writer
2005-08-17
 Insider Reports RSS Feed
The Zotob virus ran amok this week wreaking havoc on news networks and various other companies. Essentially all it did was turn off the computer. So you turn it on and it turns it back off. It's a maddening game of tag. But these worms aren't just after you, they're after each other according to F-Security.
Finnish Internet security firm, F- Security did a little note comparing and found out some interesting information. They've gotten 11 different sample of malware in the last four days that use the plug-and-play vulnerability and apparently these worms or bots rip right through each other when they plug into your computer.
Right now, there are three Zotob variants (A,B,C) on Rbot (.ADB), on Sdbot (.YN), one Codbot, three IRCbots (.ES, .ET and .EX), and two variants of Bozori (A, B). According to F-Secure, variants from both the IRCBot and Bozori are "deleting competing PnP bots."
The problem arose when Microsoft announced some vulnerabilities in their product last week during the monthly "patch Tuesday." Malware designers promptly looked through the code and exploited those vulnerabilities.
While anyone who downloaded that patch wasn't directly susceptible to the worms, if users didn't get the update, they were susceptible and then any system in that network, patch or not got shut down. Charlie Gibson of ABC's Good Morning America commented on using typewriters to prepare for their evening news last night because all their computers were down. If ever there was a sales pitch for Apple or Linux, this might be it.
About the Author:
John is a staff writer for SecurityProNews covering cyber security.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
