Havoc caused by variants of the Zotob worm could have been far worse had they not contained flaws, security companies say.
Chris Andrew, vice president of product management at PatchLink, said that coding errors caused a few variants of the worm to send computers into a reboot loop, which meant they spent very little time spreading the infection.
"If you read the vulnerability description in that exploit, it actually tells you that if you do it wrong it crashes the computer. If you do it right, then nobody can tell you have hacked the computer," Andrew said.
Related story Blaming Microsoft Many users blame Redmond for Zotob and its variants, a survey says.
He said companies that were hit by one of the flawed variants were "lucky" because it gave them more time to stop the infection taking hold.
"The people at
CNN and ABC were very upset that their computers crashed, but they were the lucky ones," Andrew said.
James Turner, security analyst at Frost & Sullivan Australia, agreed that the worm could easily have been worse--because the flawed variants gave administrators some warning that they were under attack.
"Your ultimate crime does not leave any traces. The minute a worm forces computers to do things that are abhorrent--like rebooting--it draws attention to itself," Turner said.
Allan Bell, marketing director for McAfee Asia-Pacific, said the versions that caused systems to crash--which McAfee has called IRCbot--are "often copy-and-paste jobs" created using source code distributed online.
PatchLink's Andrew agreed: "There are documented open-source materials available that show you how to do the hacks. It is hardly surprising that there are a whole bunch of (Zotob) variants."
American Express, Boeing and Holden are just some of companies with Australian locations that suffered from Zotob infections this week.
As part of its monthly patching cycle, Microsoft last week released a number of security updates, including the now infamous MS05-039, which fixed a critical vulnerability in Windows 2000.
Within days, exploit code was being distributed, and on Sunday the first Zotob worm was discovered in the wild.
Looks like the virus writers code worst than Microsoft. When will someone with l33t skills come and save the day?? They keep blamming china and stuff.. they should look more in the USAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Oops Even Cyber Mafias Err-Flawed code throttled spread of Zotob variants
Oops Even Cyber Mafias Err-Flawed code throttled spread of Zotob variants
Mr. AT Alishtari, POA and Founder of EDI Secure LLLP, says that in a banner year for cybermafia victories that even attacked and took over one of his servers, the tricksters and spammers cannot always get it right. They probably make a lot more mistakes but since they act in camera, secret, we just don't know how human they are.
This opens up a whole range of thinking for the authorities. If these guys break in not as often as they seem which is all the time, then we might have a way of catching them. They don't know when they are really breaking in and virtual break ins and though they use cross machine robots and hiding behind screens no one is truly flawless.
Ultimately, they have to retreat data stolen and resell it. Somewhere in the loop has got to be a way to trace it forwards and backwards.
While doing that we also should keep as much public and private data offline by using now U.S. Commerce Department level 4 authentication using multi-factor authentication with offline devices as soon as possible.
Google creates an animated doodle that features a boy, a girl, Google's search engine, and a jump rope. But might there be darker, more analytical, more troubling interpretations to this tale?
The Silicon Valley online payments startup grew by 1,000 percent last year and is hopeful it can repeat that level of growth this year. To do that, it's had to move away from its early friends-and-family roots and embrace small businesses.
Chamtech's spray-on antenna uses a nano material to provide a low-power boost to antenna range. The wireless-in-a-can product may some day bring an end to unsightly cell towers.
EnerG2 opens a plant to make an engineered carbon that will improve performance of energy storage devices and make storage for start-stop hybrid cars less expensive.
be considered "lucky".... nice spin.
When will the lemmings learn.
seems. ; )
(The smiley face indicates that I was kidding, Mr. Gates. Did I tell
you're looking well, Mr. Gates? Please don't have me rubbed out,
Mr. Gates.)
Mr. AT Alishtari, POA and Founder of EDI Secure LLLP, says that in a banner year for cybermafia victories that even attacked and took over one of his servers, the tricksters and spammers cannot always get it right. They probably make a lot more mistakes but since they act in camera, secret, we just don't know how human they are.
This opens up a whole range of thinking for the authorities. If these guys break in not as often as they seem which is all the time, then we might have a way of catching them. They don't know when they are really breaking in and virtual break ins and though they use cross machine robots and hiding behind screens no one is truly flawless.
Ultimately, they have to retreat data stolen and resell it. Somewhere in the loop has got to be a way to trace it forwards and backwards.
While doing that we also should keep as much public and private data offline by using now U.S. Commerce Department level 4 authentication using multi-factor authentication with offline devices as soon as possible.