Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
sobig back again?
- Thread starter ftechguy
- Start date
KimberTech
MIS
Sobig version b expired.
I just got a system into the shop that is infected with Sobig, as well as bugbear.....so far.
Most people don't realize they are infected, and with the new variants choosing random FROM email addresses from the infected address book, it's really hard to find out just who is infected and with what.
Alive and kicking sorry to say...sobig version f quit on September 10.....Sophos speculated this on their website, and this is basically what is taken as a given now.
"Putting a 'dead-date' on the two viruses suggests that the Sobig author is effectively test-driving his creations to see which tricks work best from the technical and psychological point of view," said Graham Cluley, senior technology consultant at Sophos. "By releasing Sobig variants on different days of the week, and using slightly different subject lines and filenames, the virus author may be trying to find the conditions under which his viruses can spread most quickly. He may also be refining his techniques for use in future malicious creations."
The original article is here:
Hope this answers your question. My $.02
Kimber
Members of Tek-Tips provide answers to questions based on the information given. For the best answers, post detailed descriptions of the issue. Use the search features of the site to see if your issue was previously addressed in a thread or FAQ.
I just got a system into the shop that is infected with Sobig, as well as bugbear.....so far.
Most people don't realize they are infected, and with the new variants choosing random FROM email addresses from the infected address book, it's really hard to find out just who is infected and with what.
Alive and kicking sorry to say...sobig version f quit on September 10.....Sophos speculated this on their website, and this is basically what is taken as a given now.
"Putting a 'dead-date' on the two viruses suggests that the Sobig author is effectively test-driving his creations to see which tricks work best from the technical and psychological point of view," said Graham Cluley, senior technology consultant at Sophos. "By releasing Sobig variants on different days of the week, and using slightly different subject lines and filenames, the virus author may be trying to find the conditions under which his viruses can spread most quickly. He may also be refining his techniques for use in future malicious creations."
The original article is here:
Hope this answers your question. My $.02
Kimber
Members of Tek-Tips provide answers to questions based on the information given. For the best answers, post detailed descriptions of the issue. Use the search features of the site to see if your issue was previously addressed in a thread or FAQ.
- Status
Similar threads