Yet another virus variant has quickly climbed to the top of the threat list recently. A new downloader variant of the well known Bagle worm is being picked up by antivirus companies. Some companies are calling this variant Glieder, after one of its components, since it differs from previous Bagle variants in that it doesn't spread on its own. There is one large and disturbing difference with this outbreak however. Unlike a true Bagle variant, it has no ability to spread itself and is propagated entirely through spam.
The attack, which involves a new combination of malicious code, shows evidence of "tactical coordination that is unprecedented," said Sam Curry, vice president of Computer Associates' eTrust security group.
The downloader disables antivirus programs and allows the infected machine to be forced to send huge volumes of spam itself. This, and the use of professional spam lists shows that with this outbreak, hackers and spammers have finally gotten together to distribute malware.
"I really hate to spread doom and gloom," said Curry, "But I think what we're seeing now is what we're been afraid of for a year or so now, a real partnership between the bad guys."
Comments
Urobolos
Poway, CA
June 2005
JUN 03, 2005 08:04 PM
bean
STAFF
Los Angeles, CA
JUN 03, 2005 08:32 PM
HenryC
Philadelphia, PA
November 2003
JUN 03, 2005 09:31 PM
Helter
Chester, PA
OLD SKOOL
JUN 03, 2005 09:45 PM
d20
San Francisco, CA
September 2003
JUN 03, 2005 10:00 PM
bean
STAFF
Los Angeles, CA
JUN 03, 2005 10:20 PM
ZPO
Roy, WA
July 2004
JUN 04, 2005 02:42 AM