May 2, 2005 2:53 PM PDT

Sober worm variant makes the rounds

Related Stories

Sophos declares Netsky-P worst virus of 2004

December 8, 2004

Sober worm variant shimmies

November 19, 2004
A new variant of the mass-mailing Sober worm has been discovered and is spreading among consumer PC users, security experts said Monday.

Sober.P, which operates in a similar fashion to other Sober worms, uses a subject header in an e-mail to try to entice people into opening an attachment. The virus then harvests e-mail addresses from the victim and directs a barrage of spam to those addresses.

"The social engineering has been very effective," said Craig Schmugar, virus research manager for McAfee Avert. "They will use German messages for German Windows users. They tell them they've won tickets to the World Cup, and that has been an effective (ploy) for that region."

The variant also has been compressed to make it more difficult for security software to identify when scanning a system, Schmugar said.

"Sober.P is very similar to Sober.M. They come on quick, then quickly die off," he said.

McAfee has given the worm a "medium" risk rating for home PC users.

 

Join the conversation

Add your comment

The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use.

Inside CNET News

1-2 of 12

Scroll Left Scroll Right

What's Hot

Discussions

Shared

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

Markets

Market news, charts, SEC filings, and more

Related quotes

Dow Jones Industrials (0.53%) 67.58 12,868.81
S&P 500 (0.00%) 0.00 1,342.64
NASDAQ (0.00%) 0.00 2,903.88
CNET TECH (0.00%) 0.00 2,032.02
  Symbol Lookup