|
Date-triggered Outbreak Spammed out Two New Sober Versions |
|
|
November 15, 2005
AVIRA Antivirus experts issued a virus alert this morning, warning against the outbreak of yet two more Sober variants, W and X. Massive e-mail sending by these new worms was detected last night.
Sober.W arrives by e-mail, inside a tricky attachment, displaying the same bilingual craftiness that Sober has accustomed us to. There is only a small difference of approach: most of the prior versions sent e-mail messages with different contents in English and German. Sober.W sends the same message in both languages, the only detail worthy of attention being the different linguistic proficiency: while the German text looks native-level, the English message shows some poor grammar and it openly admits this: “sorry, because, my english is not the best!” When it sends itself, the worm filters the domains in order to reach German-speaking users separately: this means it will send the German message only to the e-mail addresses hosted on .de, .at, and .ch domains. Also, when executed, the worm displays a Windows error message, which should make it easier to identify.
The Sober.X version, on the other hand, spreads inside an English message, claiming to be a registration confirmation e-mail. The actual worm file is included inside a .zip archive, named reg_text.zip.
The intriguing detail is that Sober.W and X began spreading at the same time, by spam lists. In fact, this appears to be a date-triggered outbreak and it might be possible that the author could have deliberately planned a double outbreak to start at a specific date in order to reach more victims.
AVIRA and AntiVir® users are perfectly protected against these new cyber threats, as AntiVir® was the first AV to include detection for the new Sober variants.
________________________________________________
About AVIRA GmbH
AVIRA GmbH is a German security software producer, providing its international customers and partners with increased flexibility and ease of solution migration. To guarantee high quality products right from the beginning, AVIRA benefits from the well-known AntiVir® technology, developed by H+BEDV within more than 15 years of successful activity in the antivirus industry. Expanding its activity on the international market, AVIRA is represented by Distributors, Resellers and OEM Partners, on all the continents all around the globe.
Website:www.avira.com
"
|
|
|
 |
| "Date-triggered Outbreak Spammed out Two New Sober Versions" | Login/Create an Account | 0 comments |
|
| | The comments are owned by the poster. We aren't responsible for their content. |
|
|
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
|
|
|
|
|
Average Score: 4
Votes: 3
|
|
|
