Computer Crime Research Center


Last Sober worm dropped off the radar

Date: January 10, 2006
By: Iain Thomsom

The Sober worm, which was due to activate last Thursday, has stopped spreading and its author has held back from uploading malware onto any machines.

Sober was the most common infection in November and December last year, and was programmed to download software from remote websites.

It was feared that host machines across the world would start sending spam or take part in denial of service attacks.

Instead the virus writer has stayed undercover and the worm has ceased trying to spread itself.

"When the Sober.Y download deadline passed on 6 January all infected machines started download attempts from the five different sites. At the same time, the virus stopped emailing itself around," said Mikko Hyppönen, chief research officer at security firm F-Secure.
Original article

Add comment  Email to a Friend

Copyright © 2001-2013 Computer Crime Research Center
CCRC logo