also @ TechSpot: iOS 5.1.1 untethered jailbreak tool released, supports 4S, iPad 3

TechSpot
Register now for a live online demo to see how the Office 365 suite of tools
- professional email, calendars, video conferencing, and file sharing -

Bagle variant 10

Discussion in 'General Discussion' started by Per Hansson, Mar 3, 2004.

Thread Status:
Not open for further replies.

  1. Per Hansson TechSpot Server Guru

    The tenth variant of the virus Bagle has now been released. This one is a bit smarter than the others in three ways. It lists it's sender address as your domain, so for Techspot I for example got an e-mail from support@techspot.com (which is a nonexistant address btw)

    The content of the e-mail is changed to reflect this, so it reads as it comes from the Techspot division bla bla....

    The smartest thing is that in the e-mail the password is given for the attached compressed encrypted file, what this means is that any e-mail gateways will fail to find the virus since it is encrypted, thus bypassing any security measures and allowing the virus to end up at the local workstations inside your networks. Take big note of this admins!

    Here is a page on F-Secure with further details on the virus.
    Per Hansson, Mar 3, 2004
    #1

  2. Mictlantecuhtli TS Special Forces

    Heh heh, once again it relies on people who not only click on attachments but in this case even decrypt the file :stickout:
    Mictlantecuhtli, Mar 3, 2004
    #2

  3. ---agissi--- TechSpot Paladin

    I'd hope most people who do open attachments from spam are smart enough only to do it once....
    ---agissi---, Mar 3, 2004
    #3

  4. Masque TechSpot Chancellor

    I see at least one a day in my inbox......damned annoying if you ask me. But not as much so as if I'd open it. ;)
    Masque, Mar 4, 2004
    #4

  5. SNGX1275 TechSpot Special Forces

    My university got hit pretty good with this one, I got about 10 of them one night, had about 5 the next morning, and then got another one today. It was even more clever it said this
    But the UMR servers are taking care of this now, there still is an attachment, but its not the zip anymore, its just a 224B text (which is what you get when the virus has been removed by umr servers).
    SNGX1275, Mar 4, 2004
    #5
Thread Status:
Not open for further replies.