Feeds

A plague on all our networks

Hardware trashing time

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Virus Roundup The Internet is alive with virus infections and vendors of antivirus products have wasted no time in informing the world about them.

This is the conclusion we draw from a raft of security alerts, notices and the like which dropped into our in-box or have been phoned through to us this week.

To avoid general virus fatigue we've decided that the easiest thing all round wi a general round up with links to further information.

First up, a fresh variant of Magistr, an email-aware worm which can delete files and has the potential to damage a user's Flash BIOS chip, has been discovered by Russian antivirus firm Kaspersky Labs. Like the original virus, Magistr.b may appear in randomly worded emails but differs because it carries a more destructive payload - capable of deleting data on network and hard discs on rebooting.

Messagelabs, a managed services firm which scans it clients email for viruses, has intercepted 17 copies of the virus so far. This makes it a little troublesome but the outbreak falls far short of the thousands of intercepted files "my pants are on fire" outbreak associated with SirCam.

Next up we have the first malicious program that spreads in Desktop Themes files. The Lara Croft Theme Worm masks itself as a Windows desktop decorating application with a Tomb Raider theme and is believed to spread exclusively via Internet Relay Chat (IRC) sessions.

The worm doesn't carry an infectious payload and is considered hard to catch so its interest is in its curiosity value.

Meanwhile, the Apost email-aware worm, which we covered yesterday, has spread itself a little more widely than at first expected. MessageLabs has blocked 344 copies of the bug, an increase is attributed to US workers coming back to work after Labor Day weekend.

As usual ,antivirus vendors are in the process of updating virus definition files to detect these viruses. Users are encouraged to update the antiviral protection and to avoid opening suspicious attachments.

The sudden spate of virus reports (coincidence or conspiracy?) follows a "study" by Computer Economics that virus infections have cost $10.7 billion per year, with Code Red accounting for $2.6 billion.

So far we've ignored this on the grounds that the methodology of the study doesn't seem any better than: a) going down the pub for a few beers, b) writing telephone number on the back of a fag packet and c) publishing the biggest number at the damage caused by Code Red (or was that Red Bull and vodka?) ®

Bootnote

Singapore and Belgium have signed a agreement to exchange virus bulletin information, according to the Press Association. What good will putting virus bulletins in the hands of diplomats do? And why Singapore and Belgium? Has the world gone mad?

Related Stories

Hardware-trashing virus spreads by email (story about Magistr)
Email worm is one-day wonder
'Microsoft' sending out dangerous new Internet worm
SirCam worm enjoys virus gang bang
Users haven't learned any lessons from the Love Bug
Rise in viruses within emails outpacing growth of email
Teenager finds virus, acclaimed world-saving genius

Internet Security Threat Report 2014

More from The Register

next story
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.