IT Management Begins With Security
SecurityProNews > News > Security News > 'I Love You' Mail Carries Bagle Worm In Zip File
Search:
[ news_security_news ]

'I Love You' Mail Carries Bagle Worm In Zip File



Btv Raj
Contributing Writer
2006-06-23

SecurityProNews: News RSS Feed Security News RSS Feed


When you get an email from Anna, Alice or Ellyn saying that she loves you and offers you a password to open her heart, don't get carried away. The encrypted zipped file is a Bagle worm.

Security Analysts at MicroWorld Technologies inform that "Win32.Bagle.fy" comes via password protected ZIP archives attached to spammed emails with a variety of sender names and subject lines.

The subject of the mail is the name of a person chosen from a list that carries common ones like Alice, Andrew, Androw, Annes, Christean, Dorothy ,Edmond and many more. The mail body reads 'I love you' and shows an image of the randomly generated numeric password next to it. The worm employs its own SMTP engine to proliferate, spreading fast in US, Europe and South Asia when reports last came in.

"It's always a tendency of the human psyche to open up a protected secret and nobody knows it better than the Virus writer," said Govind Rammurthy, CEO, MicroWorld Technologies. "Now when you club that penchant with a message that says 'I love you', coming from a rather common name, the whole thing adds up to the temptation and smoothly gets you into its vicious design. This is smart Social Engineering with a heady mix of emotional ploys."

With its password protected encryption, 'Bagle.fy' evades detection by security solutions at the Gateway provided by some popular AntiVirus firms. After finding an entry into the computer, the worm connects to many websites and downloads much more malicious stuff in the true tradition of Bagle family.

The Bagle family known for its innovation, fast mutation and adaptability has been hugely menacing and dangerous for enterprise security over last few years. These mass mailing worms coming in a wide variety of size, spite and modes of proliferation, have been advancing really fast into deadly Trojans that are even equipped with Rootkit capabilities. An earlier variant named Bagle.GE, carried a Rootkit component which hid the registry keys of another member, Bagle.GF.

"MicroWorld has always advocated for integrated security for enterprises with multi-tiered protection. Viruses and other malware need to be defeated at some point or the other before it sneaks into the user data. With our proactive technologies, gateway level protection and MWL technology, we leave nothing to chance in providing that layer after layer of protection," reflected Govind Rammurthy.

MicroWorld

MicroWorld (www.mwti.net ) is the developer of the world's first Real-Time Anti-Virus and Content Security software eScan for desktops and servers. Its communication security software, MailScan is the first comprehensive e-mail scanner for your SMTP/POP3 Mail Server. MicroWorld Winsock Layer (MWL) is the revolutionary technology underlying these products, powering them to several certifications and awards by some of the most prestigious testing bodies, notable among them being Virus Bulletin, Checkmark, TUCOWS, Red Hat Ready, and Novell Ready. Combining their powerful scanner with MWL technology, MicroWorld solutions provide a Real-Time Proactive security for your systems. For network security of enterprises, eConceal Firewall is the latest powerful offering from MicroWorld.




About the Author:
To learn more, kindly visit http://www.mwti.net.

Btv Raj is the Content Writer and Creative Visualizer, MicroWorld Technologies.

More news_security_news Articles

SecurityProNews: News RSS Feed Security News RSS Feed


Get Your Site Submitted for Free in the World's Largest B2B Directory!

Email Address:
* URL:
*
*Indicates Mandatory Field

Terms & Conditions

iEntry Featured Services: Jayde Member Services | Forums | Freeware | Advertise with Us

Virus Warnings

Subscribe to
SecurityProNews FREE!



[ more newsletters ]

article resources
Search Articles:
[advanced search]

WebProWorld.com
Get in-touch with industry experts and leaders
Post your site for review by expert and peers
Ask Security, IT, Development and Design questions

Free Membership: Join Now!

Visit WebProWorld.com
SecurityProNews.com | Breaking eBusiness News Get Your IT Questions Answered - Click Here SecurityProNews News Feeds