The Register® — Biting the hand that feeds IT

Feeds

Sober worm speaks with forked tongue

Bilingual Windows virus attack

  • print
  • alert

Agentless Backup is Not a Myth

A new variant of the Sober email worm is spreading rapidly across the internet today. Sober-I (AKA Sober-J) worm is mass mailing worm which sends itself to email addresses harvested from an infected computer. It uses variety of subject lines, message bodies and file attachment names, both in English and in German. There are 150 variants the most common of which are explained here.

Opening unsolicited on a Windows PC results in infection. Mac and Linux boxes are immune. Sober-I is the latest in a series of email worms dating back to Autumn 2003 but the Windows community remains as vulnerable as ever to this kind of attack. Anti-virus firm McAfee reports that it has received approximately 100 reports of the virus being stopped or infecting users from the field, from both the virus itself as well as customer submissions. Most of these reports have arrived from Europe, with a majority coming from Germany. Security firms generally rate Sober as a medium risk nuisance.

Standard defence precautions against viral attacks apply: corporates should consider blocking executables at the gateway and update anti-virus signature definition files to detect the virus. Home users should also update anti-virus tools and resist the temptation to open suspicious-looking emails. ®

Related stories

Beware sober worm bearing gifts
Sober email worm gives Windows users the DTs
Workshop: Gadzooks! My PC has the pox

Steps to Take Before Choosing a Business Continuity Partner

More from The Register

 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
Internet fraud still stings suckers
Australians twice as gullible as Americans
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
 breaking news
Yahoo! joins! rivals! in! PRISM! data! request! admission!
Keep calm and carry on using American tech firms, folks
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?