| The Sober worm is back, and it's using an old trick. Two
new incarnations of the Sober computer worm, W32/Sober-N and
W32/Sober.p, spread across the Internet over the past few days,
infecting business' PCs around the globe.
The Sober mass-mailer worm is slithering its way around the
Internet and tricking users into opening attachments with
clever messages in both English and German.
W32.Sober.N@mm sends e-mail messages with the subject headers
"I've_got your EMail on my_account!" and "FwD:
Ich bin's nochmal" and carries attachments with names
like your_text.zip. When opened, the attachment scans files
on the infected computer to harvest e-mail addresses that
enable the worm to spread.
Another recent variant, Sober.M, which surfaced back in April
accounted for 0.15% of emails containing viruses identified
by ArmourPlate. Experts say that this virus deliberately used
incorrect grammar within the subject line, thereby attempting
to convince recipients that the e-mail wasn't a virus and
make them more likely to open the infected attachment. Douglas
Schweitzer, an Internet Security Specialist says that the
reason behind the success of these worms is due to "social
engineering". He states "Our natural human tendency
to trust, is exploited by virus writers and hackers all the
time."
How can users protect against these types of attacks?
The answer lies with ArmourPlate. Since viruses are usually
more prevalent and more damaging to networks than hackers
and crackers are, e-mail users should be instructed to be
exceedingly careful about the attachments they open, especially
those from unknown sources. While this will help with the
vast majority of e-mail-borne malicious code, organizations
can eliminate the risk of opening infected files completely
by ensuring that they have antivirus protection such as ArmourPlate
in place.
ArmourPlate stops viruses dead before they even get a chance
to reach organization's networks, by using three respected
anti virus software suites and its own proprietary technology
that detects and stops new viruses that have not yet been
discovered.
In short, ArmourPlate would work alongside your existing
systems to safeguard your company's internal network, preventing
it from malicious virus and email attacks and clogging with
spam,
which causes costly downtime. By both in-bound and out-bound
scanning, your professional reputation with your staff, clients,
partners and peers is protected. ArmourPlate is brought to
you with outstanding recommendations
and eliminates the need for organizations to worry, creating
complete peace of mind.
Source: Computer World
|
CONTACT
US
Sober
up to Viruses - 11/05/2005
]
