Next Sober attack slated for Jan 5

View at CMPnetAsia.com
The next big Sober worm attack is scheduled to take place on Jan 5, a date probably picked because it's the 87th anniversary of the founding of a precursor to the Nazi Party, a security firm says on Wednesday.

January 5, 2006, was the date embedded in the most recent Sober variants, says Ken Dunham, a senior engineer with VeriSign iDefense, a security intelligence firm.

'We did reverse engineering on the variants, and found this date in the code,' says Dunham. 'The way this works is that at a pre-determined time, computers already infected with Sober will connect with specified servers and download a new payload, which will likely be spammed out in the millions, as was the last version.'

Comments