Bagle.B hits Germany and France

By

A new version of the mass mailing worm Bagle.A, W32/Bagle.B, is in the wild and is likely to spread, according to alerts from BitDefender, F-Secure, Norman Data and Sophos.

Also known as W32/Tanx, the worm spreads via email and arrives with the subject line 'ID' alongside random characters, according to Sophos reports. The message text usually states, 'Yours ID.'


Attached to the message is a randomly titled .exe file. If recipients try to open the attachment, they unknowingly enable the ability for hackers to gain remote access. In addition to this, the worm also harvests email addresses from infected PCs. The problem arises from the virus' spoofing of the sender's address to fool recipients into opening the email.

BitDefender experts have found infections of the worm in France and Germany and predict the worm will spread more in the near future. The company has already made available a free tool against the new worm on its web site, www.bitdefender.com.

Meanwhile, F-Secure reports that while the worm is infecting machines quickly, it is programmed to stop on Feb. 25.


Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Qantas obtains court order to prevent third-party access to stolen data

Qantas obtains court order to prevent third-party access to stolen data

Cloudflare makes changes to avoid repeat of 1.1.1.1 DNS outage

Cloudflare makes changes to avoid repeat of 1.1.1.1 DNS outage

ACSC alerts to exploited MS SharePoint remote code execution flaw

ACSC alerts to exploited MS SharePoint remote code execution flaw

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Log In

  |  Forgot your password?