Tuesday, November 15, 2005

F-Secure: New Sober to be released tomorrow?

Update:

Mikko writes today "they got it right":

Three Sober variants have been found over last four hours. One of them (detected by us as Email-Worm.Win32.Sober.v) matches the description predicted yesterday by the Bavarian police (see below).

Hmm. Spooky.

Yesterday:







Mikko writes in the F-Secure "News from the Lab" Blog:

In a surprise move, the Bavarian Police is warning on a worm outbreak that will happen - tomorrow.

Bayerisches Landeskriminalamt has today put out a press release. In the release they warn of a possible new Sober variant that would be launched tomorrow (Tuesday 15th of November).

The new variant should be spreading in emails like this:

Subject: Registration Confirmation
Body: Thanks for your registration. Your data are saved in the zipped Word.doc file!
Attachment: registration.zip

The German police is basing their information on a year-long investigation into the Sober case (the author of the virus is German). They also say they can not provide more details at this time ("Nähere Einzelheiten können zum jetzigen Zeitpunkt noch nicht mitgeteilt werden.")

0 Comments:

Post a Comment

<< Home