How festive – the dasher worm…



The securityfix is reporting on a new worm that exploits an older Windows vulnerability. The worm is called dasher and is in at least it’s second iteration. Sans noticed an odd increase in port 1025 scans on the tenth of the month which was early activity of this worm. It looks like the first version of the worm didn’t work fully, but this second one does. It installs a keylogger.


The traditional view of a keylogger is a rather dumb logging device recording everything typed in on a given computer. Those are out there, but it’s speculated that this one (along with other viral keyloggers) specifically target financial sites and only log when a browser is visiting those sites. (which is a clever way to filter out the noise…)

If you’ve got all current windows updates and are running a firewall, this worm shouldn’t have a big impact for you. Make sure that you keep your antivirus updated though just the same.

It looks like this Christmas present comes from servers based in China…

Sans has an update here.

Related Posts

Blog Traffic Exchange Related Posts
  • Worm bits US Customs? There is a report that a virus shut down the computer systems at US Customs. This made for long slow manual check for travelers entering the U.S. Thursday night is when this took place at a number of airports across the country. They say all has been restored to full......
  • Clampi Virus | Clampi Trojan The clampi virus is in the news in a couple places today. Surprisingly it's in Symantec's virus database since January and rated as a low risk. However, the sole purpose of this trojan is to monitor your Windows based computer for connections to more than 4500 different financial related sites......
  • New Sober variants.. Ok - there are some new variants on the Sober worm circulating. I received one on an address that's unfiltered (no virus/spam filtering) and must say, I can see people being duped into looking at the attachment. Sans has a post on it.. Sarc is calling it W32sober.x@mm and rates......
Blog Traffic Exchange Related Websites
  • Web Site Design What Fonts To Utilize Since lawyer website design, its difficult never to get bored using the same old fonts day time in and day out with every new? or not consequently new? lawyer website design. Of course, lawyer website design is an innovative job, but how can we let the creativity flow whenever were......
  • Install Interior Window Shutters to Cool Your House If you’re dealing with a lot of windows in your home and you are worried about keeping it cool inside, one of the best solutions is interior shutters. They will cost more than drapes, but they are easier to clean and much more permanent. The look of interior shutters can......
  • What is adsense for RSS feeds - Simplified Explanation! Useful Things to Take Into Consideration First things first. What is rss feeds?RSS (Rich Site Summary) is a format for delivering updated web content. Many news-related sites, weblogs and other online publishers syndicate their content as an RSS Feed to whoever wants it.Mostly in XML-based systems, it allows viewers who subscribe to the service to view......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site