Feeds

More NetSky worms. So much for quitting

Copycats?

  • alert
  • submit to reddit

Intelligent flash storage arrays

Two new NetSky worms appeared on the scene yesterday, despite a promise by the original author this week to refrain from releasing any more versions.

Differences in the code of NetSky-L and NetSky-M from their 11 older siblings have led anti-virus researchers to suspect that they are the work of a copycat. This suggests the source code of the virus has been leaked.

Text hidden inside NetSky-K said that it would be "the last version", but warned that the source code would be "available soon". Releasing the source code would make it far easier for other viruswriters to create new versions of the worm, such as NetSky-L.

Like previous versions, Netsky-L, spreads by email in an attachment. But it contains a number of significant differences from its predecessors.

Carole Theriault, a security consultant at AV firm Sophos, told El Reg that unlike earlier variants, Netsky-L contains no mention of 'Skynet', does not try and disinfect the Bagle worm, and contains no hidden text slagging off Bagle's author.

It could be the NetSky author is just playing games and hasn't quit at all. Theriault considers this as possible but unlikely even though she acknowledges that her tentative conclusions are based on circumstantial evidence.

Security watchers are yet to confirm the release of the source code of NetSky but if the original author has kept to his promise and released blueprints for the virus then this might result in the creation of more mutations.. And these might come at an even faster rate if more people have access to plans on how NetSky is built.

AV firms rate NetSky-L, which is spreading slowly, as low risk. NetSky-M is even rarer. Previous versions of the worm - in particular NetSky-D - remain a far more potent threat. ®

Related stories

NetSky author signs off
War of the worms turns into war of words
Netsky-D makes your PC go beep, beep, beep
MyDoom and Netsky cause chaos

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.