U.S. Researchers Claim New System Kills Worm Outbreaks
496843
Technique claims to be able to stop Internet worms within milliseconds of an outbreak.
634401
Antivirus companies urge e-mail caution as new variants of worm hit the Net.
571357
A new worm, W32/Funner, is spread over the MSN Messenger instant messaging networks. Experts say it has caused minimal damage, but they say IM networks are ripe for more virus attacks.
430119
Researchers who have been probing the Storm Trojan in an effort to fight it said they aren't afraid of the malware, despite comments to the contrary this week from Josh Corman of IBM's Internet Security Systems Inc.
394357
An anonymous security researcher claims to have created a proof-of-concept worm that exploits a vulnerability in Apple's Mac OS X.
187566
Infected computers can be used as &quot;zombies&quot; to send spam or launch attacks on Web sites. Spreading Trojans via chat rooms is not unusual.
238166
A new worm has been discovered in the wild that&#39;s not just settling for invading users&#39; PCs--it wants to invade their homes, too.
10743
A previously unknown virus killed three women who got organ transplants from an Australian donor, and researchers say the technique they used to identify it could lead them to many more new infectious agents.
578616
U.S. scientists say they have analyzed the genetic makeup of an entire community of bacteria that live inside an unusual marine worm.
682949
The newest version of the MyDoom worm now circulating suggests to security experts that the much-anticipated &quot;Zero Day attack&quot; may have arrived.
274144
(InfoWorld) - They just don't make malware like they used to. Or at least like they did earlier this year. Even low-quality malware, however, is taxing the resources of security companies, since it is being detected in ever-higher numbers. Over the last six months, the technical creativity of malware has fallen along with the ability to cause massive damage, such as that created by the MyDoom and Sasser worms of years past, wrote Alexander Gostev, senior virus analyst for Kaspersky Lab, in a recent report. Gostev's lab intermittently sees highly technical malware, but most is "the same unending stream of Trojans, viruses and worms," he wrote. In many cases, hackers simply take existing malware and create variants, by tweaking the older code to evade antivirus software. At times, the process is simple trial and error. Malware writers use online scanners such as Virustotal , which check to see if their new code will be detected by antivirus software, said Mikko Hypponen, chief research officer for F-Secure. If the code is detectable, they can make a slight modification and run it through the scanner again. "I'd like to tell you that we're winning this war," Hypponen said. "But frankly, I'm not so sure. We need new kinds of solutions." Because much of the code is not new, it tends to remain effective for shorter periods of time before antivirus companies detect it. Still, the time it takes to identify and create a signature for a new virus, which can range from a few minutes to a few hours, is often long enough for hackers to infect computers. "Antivirus companies are working at the limits of their capabilities in terms of speed," Gostev wrote. To be sure, some malicious hackers are doing creative work. This year saw some sophisticated phishing attacks, and virus writers have been branching into relatively new areas like instant messaging and social networking sites, noted Christopher Boyd, security research manager for FaceTime Communications. But the trend overall, he said, has been "quantity over quality." Kaspersky Lab in Moscow is on the front lines of the battle. Its analysts added 2,000 signatures to their database in January 2005. Last month they added 10,000 signatures -- a five-fold increase, said Stanislav Shevchenko, head of the lab. The virus analysts work 12-hours shifts, pulling up screen after screen of rolling lines of code. Automated tools analyze some pieces of malware, but human analysis is still needed for others. A good analyst should process an average piece of malware within 5 minutes, Shevchenko said. But some of the rarer, more creative code is harder to crack. Polymorphic viruses -- ones that can change their byte sequences to throw off antivirus software -- can take up to a week to analyze, Shevchenko said. The signatures are added to a database used by Kaspersky's antivirus engine, which is licensed by other security vendors such as Juniper Networks, ClearSwift , and F-Secure. The increase in the volume of malicious code can be attributed in part to the impunity enjoyed by malware writers, said Eugene Kaspersky, head of antivirus research. Despite efforts by law enforcement agencies to strengthen international cooperation, most malware writers are never punished. "It's quite safe for them," Kaspersky said. "If they are clever enough, there is almost no risk for them at the moment." The U.S. Federal Bureau of Investigation and Russia's Federal Security Service (FSB), the successor to the country's KGB intelligence agency, frequently ask Kaspersky Lab for information, said Kaspersky spokesman Timur Tsoriev. The FSB, however, approaches Kaspersky less these days since the agency has bolstered its in-house expertise, Kaspersky said. Kaspersky said his lab focuses less on finding the root of criminal activity than protecting the company's customers. But the burden of rising online criminal activity directly impacts security companies, he said. "If there is no help from the police and if they don't reduce the number of criminals, I'm afraid the detection for all antivirus products will go down," Kaspersky said.
446357
Amid groans of &quot;I wonder why it took so long?&quot; a new worm has been discovered that can access a webcam and microphone attached to an infected PC.
406110
DECEMBER 21, 2004 (IDG NEWS SERVICE) - Antivirus companies are warning Internet users about a new, fast-spreading worm that infects Web servers running a popular package of online bulletin board software and uses the Google search engine to find
126866
Experts at a UK anti-virus firm have discovered a job application buried in lines of code for two new computer worm viruses. The message, which could only be read by anti-virus professionals, said: &quot;We searching 4 work in AV (anti-virus) industry.
595540
Scientific sleuths have a new suspect for a mysterious affliction that has killed off honeybees by the billions: a virus previously unknown in the United States.
91037
Researchers in the U.S. say they've shown how a network designed to make it harder to trace Internet surfers could be compromised.
714646
RIP: mass-mailing worms? The move to more targeted Trojan attacks as opposed to mass mailing worms left last month's virus charts almost static.â¦