securitygeek (![[info]](http://l-stat.livejournal.com/img/userinfo.gif){kind=small} securitygeek) wrote,@ 2005-08-18 09:34:00 |
|
A bot war has broken out
These all attack the MS05-039 vulnerability:
Zotob.A,B,C,D,E,F,G,H,I
IRCbot.ES, ET, EX
Bozori.A, B
Rbot.YN
SDbot.ADB
Codbot
Now the malware writers have started a bot war, with each new version deleting the old malware. We have seen up to Zotob.I so far. CNN, Boeing, and other big companies have been hit with some varient.
In the last 12-18 months we have seen the window between the release of Microsoft patches and the release of the worms that exploit them shrink from months to weeks, and now down to days.
These all attack the MS05-039 vulnerability:
Zotob.A,B,C,D,E,F,G,H,I
IRCbot.ES, ET, EX
Bozori.A, B
Rbot.YN
SDbot.ADB
Codbot
Now the malware writers have started a bot war, with each new version deleting the old malware. We have seen up to Zotob.I so far. CNN, Boeing, and other big companies have been hit with some varient.
In the last 12-18 months we have seen the window between the release of Microsoft patches and the release of the worms that exploit them shrink from months to weeks, and now down to days.
