New flavor of Bagle worm discovered

By

A new, unique variety of the Bagle worm are in the wild, several internet security firms warned this week.

Helsinki-based F-Secure warned PC users that this version of the worm is unique because the malicious website promoted by the virus changes every four minutes.


The Finnish firm called the worm W32/Bagle.GI, adding that the virus's contents, which encourage PC users to visit the malicious website, keep changing.

One simple solution was to block access to Bagle-related malicious websites, the firm warned on its company blog.

"To make a long story short: block access to this download site. It's at endoliteindia[dot]com – a hacked web server in India," said Mikko Hypponen on the F-Secure website.

Bagle.A was first spotted in January 2004 and stopped spreading by the end of the month. Bagle.B, which was more destructive and widespread than its earlier version, began spreading in February of that year.

McAfee also reported a new sighting of the worm today, calling it Bagle.ew. The firm, ranked the trojan downloader as having a threat level of only 2 of 7.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Melbourne dev finds gift card PINs can be brute-forced

Melbourne dev finds gift card PINs can be brute-forced

Department of Health to centralise SecOps model

Department of Health to centralise SecOps model

Zero-click Apple and WhatsApp bug combo used to drop gov spyware

Zero-click Apple and WhatsApp bug combo used to drop gov spyware

Jaguar Land Rover hit by cyber incident

Jaguar Land Rover hit by cyber incident

Log In

  |  Forgot your password?