Internet Security News 2005-03-11

[george]

Internet security news 2005-03-11

1. Here some internet security news for you:

2. Sober.K email worm that might cause spam problems.

Recent detection of Sober.K email worm that might cause spam

problems as single users can receive thousands of spam mails

caused by this worm. Spam mails that appears to be sent from

FBI or other 'legitimate' senders containing messages and attachments

that you are asked to open.

http://www.norman.com/Virus/Virus_descriptions/20400/en

3. Several new versions of MyDoom worms.

Has experienced several new versions of MyDoom worms. MyDoom

causes spam and might install backdoors.

http://www.norman.com/Virus/Virus_descriptions/20316/en

4. Increase in propagation of network worms, known as Spybots

and Gaobots.

There has been an increase in propagation of network worms, known

as Spybots and Gaobot. These are worms combined with ad- and

spyware who are not spread through emails but e.g. from network

to network. The fact that this is a combined attack with worms

using other malicious codes is an upcoming trend in IT-security,

thus rising new challenges for antivirus solutions and computer

security companies. These bots can infect your computer and you

won't have the faintest idea that you are infected. - Not even

your computer's task list will necessarily show any signs that

something is wrong, says head of development Steinar Wigtil at

Norman. The Norman SandBox solution is the best way to protect

you from these attacks because of the proactive technology that

does not require any updated signature files in order to detect

a virus.

http://www.norman.com/Virus/Security_Information/20802/en

5. Six new versions of the Bagle worm were discovered

In the first day of March six new versions of the Bagle worm

were discovered. The name of the new versions may include the

name Bagle. At the same time propagation of the trojan Mitglieder

was discovered and one suspects that these malwares work together

in order to accomplish the highest proliferation. The trojan

was spread globally and is expected to spread even more within

the next few days. It spread through emails with attachments

that are normally called price.zip or price2.zip. If the user

opens this file the trojan will be activated and it will then

try to connect to an Internet address from where it downloads

the Bagle worm. The trojan will also shut down different antivirus

programmes and other security processes.

6. 25 percent of UK adults have had their identity stolen or

know someone who has, as a result of ID fraud through infected

emails. ID fraud is one of the fastest growing crimes in the

UK and costs an estimated £ 1.3 billion a year.

http://uk.biz.yahoo.com/050303/22/fdmnb.html

7. Increase in phishing scams

There has been a growing commercialisation of malware for the

specific purpose of making money illegally. The increase in phishing

scams is one part of this phenomenon. It is not easy to quantify

the losses resulting from phishing, but there is no doubt that

the costs are increasing rapidly. According to the anti-phising

group, between July and December 2004, there was a 38 percent

average monthly growth rate in the number of new, unique phishing

email messages.

8. Day Zero attacks

Day Zero attacks- attacks that take place on the very same day

as a vulnerability has become public knowledge.

http://www.norman.com/Virus/Sandbox/20372/en

9. The first attacks through MSN Messenger

The first attacks through MSN Messenger took place recently.

The best way to avoid these attacks is to keep your antivirus

and antiadaware tools updated at all times. – It also helps if

you use your common sense. - Do not open any links or attachments

that you don't know the content of, says virus analyst Snorre

Fagerland.

http://www.norman.com/News/Other_news/20774/en

Source: Norman.com 2005-03-11