September 21, 2005 11:56 AM PDT

Bagle attack comes in two waves

Two waves of spam were launched this week to send out new variants of the Bagle Trojan horse, antivirus company Sophos said.

All versions of the Bagle DI-U Trojan try to turn off antivirus and security software, and to block access to security Web sites, in an attempt to strip away a PC's immune system, enabling hackers to gain access, Sophos said in a statement Tuesday.

There are strong similarities between the two waves of spammed messages bearing the Trojan, according to Sophos. In both, the subject line is blank, the body message text is "new price," and the malicious file attached could be identified with names such as "09_price.zip," "price_new.zip," and "price2.zip."

Bagle has spawned at least 70 variants since the virus emerged in January 2004. Some iterations have been more sophisticated than others, blending mass-mailing and Trojan horse techniques.

Sophos advised taking the usual precautions against such attacks. "All computer users must avoid opening unsolicited e-mail attachments and ensure that their antivirus protection is up-to-date," Carole Theriault, a senior security consultant at the antivirus company, said in a statement.

Theriault said corporate Internet users should also consider blocking all executable code from entering their networks via e-mail.

Tom Espiner of ZDNet UK reported from London. CNET News.com's Joris Evers contributed to this report.

See more CNET content tagged:
Bagle virus, Sophos Plc., antivirus company, wave, antivirus

Add a Comment (Log in or register) 4 comments
Too much cyber crime and too little time- what is one to do?
by September 22, 2005 8:10 AM PDT
Too much cyber crime and too little time- what is one to do?

My companies and its affiliates were attacked from Beijing servers through Phishing on emails and trojans. This two part attack was, well, prolific and must be robotic because we eliminate it and it comes back automatically.

Plus these anonymous entitities that attempt to take over my servers also try to make all related addresses and PCs robots to continue their nefarious derring do. Simply put, we need the US Senate to authorize the Cybercrime Treaty the European Union put forward and which both Taiwan and Beijing signed so we can track these cyber scammers down and shut them down.

Then, consumers need to have mandated that not only the US Government as the Privacy Act states uses top authentication like Dept. of Commerce level 4 multi-factor authentication with offline swipe device but that the same top protection be given to consumers so that confidence in e-commerce comes back. That is all I have to say.
Reply to this comment
Too much cyber crime and too little time- what is one to do?
by September 22, 2005 8:10 AM PDT
Too much cyber crime and too little time- what is one to do?

My companies and its affiliates were attacked from Beijing servers through Phishing on emails and trojans. This two part attack was, well, prolific and must be robotic because we eliminate it and it comes back automatically.

Plus these anonymous entitities that attempt to take over my servers also try to make all related addresses and PCs robots to continue their nefarious derring do. Simply put, we need the US Senate to authorize the Cybercrime Treaty the European Union put forward and which both Taiwan and Beijing signed so we can track these cyber scammers down and shut them down.

Then, consumers need to have mandated that not only the US Government as the Privacy Act states uses top authentication like Dept. of Commerce level 4 multi-factor authentication with offline swipe device but that the same top protection be given to consumers so that confidence in e-commerce comes back. That is all I have to say.
Reply to this comment
Too much cyber crime and too little time- what is one to do?
by September 22, 2005 8:10 AM PDT
Too much cyber crime and too little time- what is one to do?

My companies and its affiliates were attacked from Beijing servers through Phishing on emails and trojans. This two part attack was, well, prolific and must be robotic because we eliminate it and it comes back automatically.

Plus these anonymous entitities that attempt to take over my servers also try to make all related addresses and PCs robots to continue their nefarious derring do. Simply put, we need the US Senate to authorize the Cybercrime Treaty the European Union put forward and which both Taiwan and Beijing signed so we can track these cyber scammers down and shut them down.

Then, consumers need to have mandated that not only the US Government as the Privacy Act states uses top authentication like Dept. of Commerce level 4 multi-factor authentication with offline swipe device but that the same top protection be given to consumers so that confidence in e-commerce comes back. That is all I have to say.
Reply to this comment
Too much cyber crime and too little time- what is one to do?
by September 22, 2005 8:10 AM PDT
Too much cyber crime and too little time- what is one to do?

My companies and its affiliates were attacked from Beijing servers through Phishing on emails and trojans. This two part attack was, well, prolific and must be robotic because we eliminate it and it comes back automatically.

Plus these anonymous entitities that attempt to take over my servers also try to make all related addresses and PCs robots to continue their nefarious derring do. Simply put, we need the US Senate to authorize the Cybercrime Treaty the European Union put forward and which both Taiwan and Beijing signed so we can track these cyber scammers down and shut them down.

Then, consumers need to have mandated that not only the US Government as the Privacy Act states uses top authentication like Dept. of Commerce level 4 multi-factor authentication with offline swipe device but that the same top protection be given to consumers so that confidence in e-commerce comes back. That is all I have to say.
Reply to this comment
Powered by Jive Software
advertisement

Latest tech news headlines

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

advertisement

Inside CNET News

Scroll Left Scroll Right
  • Nanotech: The Circuits Blog

    Timing rumors surface for AMD plant spin-off

    Rumors persist that Advanced Micro Devices is planning to spin off all or part of its manufacturing operations.

  • Gallery

    Photos: Ron Paul's RNC alternative

    As the Republican convention took place just miles away, a crowd rallied for the former presidential candidate and his message of limited government, ensured civil liberties, lower taxes, and peace.

  • Digital Noise: Music and Tech

    Was 1980s music that bad?

    NPR asks listeners which year featured the best music, and the 1980s emerge as a bleak era. Personally, the '80s figure prominently in my collection, but well behind the 1970s.

  • Beyond Binary

    Microsoft begins big ad push

    Microsoft's multi-year push, estimated at $300 million, begins with a spot featuring Bill Gates and Jerry Seinfeld aired during Thursday's NFL game.

  • Video

    YouTube plays party politics

    During the presidential campaigning four years ago, YouTube didn't even exist. Now it's a tool candidates must master to get their message across. CNET's Kara Tsuboi stops by the YouTube upload booths at the Democratic and Republican conventions to find out why Google's video site has such a big presence in Denver and St. Paul, Minn.

  • News - Digital Media

    Michael Moore plans Net-only film premiere

    Filmmaker plans to premiere his latest documentary exclusively on the Internet for free, forgoing the traditional theatrical release.

  • Video

    Political party playlists

    We know the Democrats and Republicans are split over policy issues, but does their musical taste fall down party lines too? And what kind of gadgets did they bring to the conventions to listen to their music? CNET reporter Kara Tsuboi finds out.

  • News - Politics and Law

    What you can--and can't--find about Palin on the Internet

    John McCain's choice of Sarah Palin as a running mate has inspired a wealth of creativity on the Internet.

  • News - Cutting Edge

    Execs predict next Google-like tech

    On eve of company's 10-year anniversary, researchers and business pundits speculate about what technologies might someday have as much impact as Google.

  • Gallery

    Photos: The brains behind Google Chrome

    Here's a look at some of the engineers and executives who took the stage at the company's headquarters as they unveiled the new browser.

  • Webware

    10 things we'd like to see in Chrome

    Google's Chrome is pretty good, but it could be a whole lot better. We've rounded up 10 fairly extensive ways to tweak it to make it an all-around better browser.

  • Green Tech

    Clean-tech group forms to support Obama

    "Clean Tech and Green Business for Obama" aims to raise $1 million for the Democratic presidential nominee while elevating issues of climate change and alternative energy.