Brief: Storm Worm pursues more "members"
92686
Storm Worm pursues more &quot;members&quot; &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
371936
roundup Plus: Siebel moves toward self-repairing software...Monster says it could enter Japan by mid-2005...Novell to release Open Enterprise Server.
571357
A new worm, W32/Funner, is spread over the MSN Messenger instant messaging networks. Experts say it has caused minimal damage, but they say IM networks are ripe for more virus attacks.
315060
roundup Plus: IronPort spam shield gets steelier...Via brings PCI Express to AMD PCs...Rice lab makes nano parts less toxic.
672973
Making use of the current trend to send festive greetings via email, a new virus is making the rounds. A variant of the ZAFI worm, the WORM_Zafi.
117582
The Storm worm botnet is growing once again, this time using Valentine's Day-themed e-mails.
373811
Plus: SCO to cap legal costs...Novell sees weakness in IT spending...Salesforce reports rise in profit...Nortel to lay off 3,500.
669622
Mass-mailing Zafi-D worm, which disguises itself as a Christmas greeting, is infecting more than one in every ten emails. The worm, which spreads in a file attached to email messages containing the text âHappy
462449
roundup Plus: Vonage users dial 311 for city info...Mozilla makes Japanese push...Macromedia offers Flash video tool.
250358
The Justice Department begins a nationwide crackdown against spammers. Also: The EU extends its review of Microsoft's deal with Time Warner & hellip;. Sprint finds a third cable partner to offer VoIP & hellip;. and more.
172876
Domains of several new phishing sites are cropping up with known Storm worm domains. F-Secure researchers think phishers are leasing parts of the larger botnet.
212272
The fine art of pulling numbers from your nether regions After much waiting by end users, and a lot of hoping from interested Information Security watchers, Microsoft has finally added detection for the Storm Trojan (Nuwar, Zhelatin, etc) to its Malicious Software Removal Tool. The most recent update, released on September 11th, included detection for this malicious software, and the early results are not quite what most people were expecting.â¦
337848
Software giant promises to deliver another tool to fight worms and viruses.
89906
roundup Plus: CA adds utility-like mainframe pricing, expects...Salesforce.com reports subscriber surge...RealNetworks signs up Red Flag Linux.
704436
(InfoWorld) - A Republican Party Web site has been hacked, and for some time it has been spreading a variation of the long-running Storm Trojan horse to vulnerable visitors, a security researcher said Friday. This is the first time that Storm has taken to the Web for its victims, said Dan Hubbard, head of research at San Diego-based Websense. "The big news is that Storm has added infecting sites to its arsenal," said Hubbard. Storm debuted in January but only cracked the top malware lists early this summer, and has become infamous for its ability to adapt its infection strategies. "They have a knack for latching onto the latest newsworthy events and capitalizing on the public interest in them," Symantec researcher Hon Lau said last month. "And if no newsworthy events are happening at the time, then they will just make them up." Until now, Storm has infected users via files attached to e-mail or through links embedded in spam. The change noticed by Websense's scanners, however, means that Storm's backers have moved to other attack vectors -- in particular, compromised Web sites that sport malicious IFRAMEs. Users visiting such sites are instantly infected with the Trojan if their browsers are not patched against whatever exploit the IFRAME code is throwing out. According to Hubbard, several hundred sites have been compromised by Storm's makers, then seeded with IFRAMES that can inject the Trojan into vulnerable PCs. One such site was a Republican Party Web site for the 1st Congressional District of Wisconsin. Within hours after Websense notified the site's owners, however, it had been purged of the dangerous IFRAME code. By mid-morning Friday, it was safe to visit. Hubbard did not know how the site was compromised. The motive behind Storm's continued attacks and its expansion into new areas like this, said Hubbard, is a never-ending appetite for bots -- compromised computers that can be used for spamming or other criminal activities either by the original attackers or by others who lease sections of the botnet. "Storm's botnet is clearly the biggest around," said Hubbard, who estimated its size as "conservatively, in the hundreds of thousands, although some people have thrown out numbers like 1 million or 2 million or even 4 million." Earlier this month, in fact, MessageLabs pegged the botnet at 2 million machines. In the last few weeks alone, Storm has spread through e-mails touting a real-time scoreboard site for National Football League games, spam hyping a Web site that wished Americans a happy Labor Day holiday, and more mail that used YouTube videos as bait. Computerworld is an InfoWorld affiliate
705157
roundup Plus: HP rakes in .Net dough...Escend raises $3 million...Hitachi cuts 10 percent of U.S. work force...Evite goes local with invitations.
237926
roundup Plus: Monster says it could enter Japan by mid-2005...Novell to release Open Enterprise Server...Blizzard wins online game suit...CA adds utility-like mainframe pricing, expects.