New variation of Sober virus coming in January



Now, we seem to be getting “coming attractions” previews in virus-land…. Anyway, I’ve read at several sources that we are to expect a new variation on the sober worm around January 5th, 2006. It’s said that the date was chosen to mark the formation of the Nazi Party. In the past, variants have spouted pro-nazi sentiments and redirected users to pro-nazi web sites.


Recently Sober variants got the media name of the fbi/cia virus as one vehicle for setting up a mass mailing network to spout the pro-nazi propaganda emails.

Now, one of the running questions would be, “if they can predict it’s coming, can’t they do something?” It looks as though an analysis of the code has discovered that a new set of instructions is scheduled to be downloaded from certain web servers on January 5th, that’s how they know something’s coming. The encryption code that protected the list of sites has also been broken, so they know where the donwloads are expected to come from, many are not yet active.

They’re hoping with law enforcement attention AND a good list of where the bug is to be downloaded from, they’ll be able to prevent this from being a big event. Sounds promising. A publicly available list of suspect sites might be nice, so that network administrators could selectively blacklist the suspects pre-emptively.

Related Posts

Blog Traffic Exchange Related Posts
  • Web 2.0 could lead to virus 2.0... The last couple days, there's been a virus spreading making use of yahoo mail's interface. Usually web mail is considered a fairly safe way to get email, but in this case all that was done was the user clicking on a malicious email and the virus ran. It appears that......
  • Sober virus watch... Well, antivirus vendors and IT security folks are waiting now for the expected activation of the sober.y worm searching for a new downloads and a new revision of the pest. kaspersky's log indicates the expected activation time is 00:00 GMT January 6th, which means here in the EST zone that......
  • F-secure list of sober virus urls When the news was first out that an antivirus firm (f-secure) had cracked the psuedo-random algorithm that the sober worm uses to determine where to download "updates" from, they said that they had previously notified German authorities where the free hosting sites were located so that they could deal with......
Blog Traffic Exchange Related Websites
  • Using a Home Improvement Video to Guide Your Project Home improvement handymen these days get a lot of their information from the internet. There is nothing wrong with this as there are many sites just like this one that exists to provide people with useful information on the different aspects of home improvement. However, one thing that you need......
  • Bloggers: Exclusive, Limited-Time Offer to Save Big on The Blog Traffic Exchange While this won't interest my general audience, the Wordpress bloggers among you might want to listen up. The Blog Traffic Exchange is very similar to your related posts plugin (you are using a related posts plugin, right?). The difference is that the Blog Traffic Exchange is related posts from around......
  • Lazy Man Sites Hacked and the Lessons We Can All Learn From It If you've been wondering why things were a little quiet around here lately, it's because yesterday some of my sites were hacked. Fortunately, I've put Lazy Man and Money on a separate server that went unharmed. I also have backups of everything made each day to Amazon's S3 service. So......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site