Bagle.B hits Germany and France

By

A new version of the mass mailing worm Bagle.A, W32/Bagle.B, is in the wild and is likely to spread, according to alerts from BitDefender, F-Secure, Norman Data and Sophos.

Also known as W32/Tanx, the worm spreads via email and arrives with the subject line 'ID' alongside random characters, according to Sophos reports. The message text usually states, 'Yours ID.'


Attached to the message is a randomly titled .exe file. If recipients try to open the attachment, they unknowingly enable the ability for hackers to gain remote access. In addition to this, the worm also harvests email addresses from infected PCs. The problem arises from the virus' spoofing of the sender's address to fool recipients into opening the email.

BitDefender experts have found infections of the worm in France and Germany and predict the worm will spread more in the near future. The company has already made available a free tool against the new worm on its web site, www.bitdefender.com.

Meanwhile, F-Secure reports that while the worm is infecting machines quickly, it is programmed to stop on Feb. 25.


Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Australia's super funds told to assess authentication controls

Australia's super funds told to assess authentication controls

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

CBA looks to GenAI to assist 1200 'security champions'

CBA looks to GenAI to assist 1200 'security champions'

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Log In

  |  Forgot your password?