Help - Search - Members - Calendar
Full Version: Next Sober Attack Slated For Jan. 5
BleepingComputer.com > Security > Breaking Virus & Security News
   
quietman7
QUOTE
Next Sober Attack Slated For Jan. 5
December 07, 2005
By Gregg Keizer

The next big Sober worm attack is scheduled to take place January 5, 2006, a date probably picked because it's the 87th anniversary of the founding of a precursor to the Nazi Party, a security firm said Wednesday.

January 5, 2006, was the date embedded in the most recent Sober variants..."We did reverse engineering on the variants, and found this date in the code," said Dunham. "The way this works is that at a pre-determined time, computers already infected with Sober will connect with specified servers and download a new payload, which will likely be spammed out in the millions, as was the last version."...

securitypipeline.com
BanditFlyer
Thanks for the info Quietman.

Do you ever inform the people whose machines are sending you these virii that they are sending out virii? I did a whois search on some of the IPs I found in several of the sober worm messages I have received purporting to be from the CIA and FBI and several of them have had the same IP.

I was wondering if I should try to look them up? They do not look like normal whois entries in that they do not list contact info for a business such as an email, phone number, etc. They only list a business name and an IP block, so it looks like these are the actual ISPs that they are using.

Should I try alerting the ISP???

What do you do?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.