Santy Worm Hits AOL, Yahoo
90728
A new variant of the Santy worm, which attacks Web pages usuing the PHP bulletin board software, appeared this week. Earlier variants used Google to find vulnerable Web pages; the new
24644
The Santy worm with variants continues spreading on the Internet taking advantage of search engines, including Google, AOL, Yahoo to identify exploitable Web pages.
121737
Symantec said when someon clicks on an infected link in a message, the worm tries to download code from remote sites, to redirect users to certain Web sites and to send a version of itself to everyone in an IM user&#39;s contact list as well.
234914
Ziff Davis - Over the Christmas weekend, security hackers taunt Microsoft's security efforts with a new Windows proof-of-concept exploit that takes advantage of several unpatched bugs. And a new version of the Santy worm targets PHP scripts.
198643
Responding to calls from antivirus firms, Google has taken steps to stop the spread of an Internet worm called Santy worm. The santy worm was first spotted early Tuesday morning and was using Googleâs search
15380
Web site visitors who clicked on banner ads on a number of popular European Web sites this weekend could have infected their computers with variants of the Bofra worm, experts warn.
703212
Security researchers have found a nasty vulnerability in AOL's ICQ Pro 2003b software. AOL is recommendng that users update their software.
711347
Code that exploits a "critical" Windows flaw has been posted on the Net, opening the door for a worm to be created.
406110
DECEMBER 21, 2004 (IDG NEWS SERVICE) - Antivirus companies are warning Internet users about a new, fast-spreading worm that infects Web servers running a popular package of online bulletin board software and uses the Google search engine to find
316177
An attack combining malicious codes on Web sites and end-user laziness could compromise millions of routers still configured with their out-of-the-box defaults.
464065
Malware that spreads via Yahoo Messenger also plays screeching music and hijacks IE's home page.
233929
Ziff Davis - Anti-Santy-Worm V4 attempts to patch vulnerable Web forum software but might cause denial-of-service attacks.
505110
Last week a new worm started spreading on the Internet. It&#39;s named Santy, and it attempts to deface websites using specific versions of the popular phpBB bulletin board software.
236348
At least one new variant of a worm spread rapidly from Asia and Europe to US computers, filling up people&#39;s email accounts, but otherwise causing little apparent damage.
680697
The "Storm Trojan" is at it again and is now spreading via AOL Instant Messenger, Google Talk and Yahoo Messenger, security researchers said;.
150750
(InfoWorld) - A critical flaw in the way that the AOL's instant messaging client, AIM,Â displays Web-based graphics could be exploited by criminals to create a self-copying worm attack, security researchers are warning. The flaw was discovered by researchers at Core Security Technologies, which has been working with AOL over the past few weeks to patch the problem. AOL's servers are now filtering instant messaging traffic to intercept any attacks, but the company has yet to patch the underlying problem in its client software, security researchers said Tuesday. The flaw has to do with the way the AIM software uses Internet Explorer's software to render HTML messages. By sending a maliciously encoded HTML message to an AIM user, an attacker could run unauthorized software on a victim's computer or force the IE browser to visit a maliciously encoded Web page, said Core CTO IvÃ¡n Arce. This type of flaw could be exploited to create a self-replicating worm attack, according to both Core's Arce and Aviv Raff, a security researcher who on Tuesday reported that he'd discovered a related flaw in AIM. "The frightening thing about this vulnerability is that it can be easily exploited to create a massive IM worm, because it doesn't require any user interaction," Raff said. No attacks based on these flaws have been reported. Computer worms were front page news in 2003 and 2004 when Blaster, Sobig, and Sasser gummed up PCs around the world. And while Web-based worms have been in the news, a widespread instant messaging worm would be something new. Arce says that the safest thing is for AIM users to either upgrade to the 6.5 beta code or to downgrade to a 5.9 version of the software, which does not support the HTML rendering capability. But Raff offered different advice, saying that AIM 6.5 is still vulnerable to the flaw he discovered. According to him the best thing would be for AOL to "fix the underlying code," although AIM 5.9 is "probably not vulnerable to this specific vulnerability," he said. AOL may not be planning to fix its AIM code any time soon, according to a statement provided by the company late Tuesday. "We have resolved all of the issues presented to us by Core Security within all past, current, and future versions of AIM," AOL said without commenting on Raff's findings. Users should still be concerned, however. Core's Arce said that he was worried that hackers could find ways around AOL's filters. What AOL has done is "just one portion of the solution, and that's not the most effective portion," he said. "The most effective solution is to run a client that doesn't have the problem."
304869
Antivirus companies are warning internet users about a fast-spreading new worm that infects web servers running a popular package of online bulletin board software, and uses the Google search engine to find vulnerable servers to infect.