Two New Worms Follow Sasser Route

KingFishKingFish
edited May 2004 in Science & Tech
Investigations into recent increases in port 5000 scans have revealed the existence of two new worms: Bobax and Kibuv.
The W32/Bobax-A worm, which employs the same Microsoft security vulnerability as the Sasser worm to break into computers, uses port 5000 to identify Windows XP systems (the port used for "Universal Plug and Play"). According to the Sophos Web site, this new worm "is capable of turning infected computers into spam factories and launchpads for denial-of-service attacks against Web sites."
Didn't the schmucks that wrote these learn from the last 6 that were arrested for the Sasser worm? Hopefully the attack will be limited due to cleanup efforts from the Sasser worm. -KingFish

Source: ZDNet

Comments

  • DanGDanG I AM CANADIAN Icrontian
    edited May 2004
    Whee, another virus. Time for more fun and slow downs on the net.
  • EyesOnlyEyesOnly Sweden New
    edited May 2004
    Yeah like i don't have enough internet problems. :rant:
  • DexterDexter Vancouver, BC Canada
    edited May 2004
    KingFish wrote:

    Didn't the schmucks that wrote these learn from the last 6 that were arrested for the Sasser worm? Hopefully the attack will be limited due to cleanup efforts from the Sasser worm. -KingFish


    That's part of the problem: they never think they are going to get caught. Hopefully the authorities catch and prosecute more of these clowns, so the risk starts to outweigh the thrill.

    Dexter...
Sign In or Register to comment.