|
UK and International
Business Portal
|
|
|
|
|
||||||
|
||||||||
|
Platinax Internet >> Platinax Internet News
« Dollar continues record fall against Euro | Main | Internet wins Christmas shoppers, but high street sales fail Boxing Day » December 28, 2004PHPBB worms multiplyVariants of the Santy worm, which as reported in Santy: Automated attack on phpbb forums, have begun to surface, continuing a worrying trend of worms that automatically query search engines for suitable targets. Although the original Santy Worm was an application written in PHP, a major new variant written in Perl has emerged. Security firms are showing marked differences with classifying the resulting variants, with Symantec now designating the line with the suffix Perl.phpinclude, while Kaspersky renamed Santy.d and Santy.e as Spyki.a and b., citing significant differences in the worms' structure from earlier Santies. According to Google worm targets AOL, Yahoo "Perl.Santy.B is a worm written in Perl script that attempts to spread to Web servers running versions of the phpBB 2.x bulletin board software prior to 2.0.11," warned Symantec in a Dec. 26 bulletin. "It uses AOL or Yahoo search to find potential new infection targets." The Brazilian Google has also apparently been specifically targeted for the worms for seeking out targets. Harry Fuecks at Sitepoint has also written an informative article on the issue of how the variants actually operate, and clearing up a few apparent misconceptions that exploits in PHP itself were being used to drive them: PHP Worms: Santy / Perl.PhpInclude - ModSecurity. Posted by brian_turner at December 28, 2004 03:55 PM | Discuss this in the Business, Marketing & Search forumsTrackback PingsTrackBack URL for this entry: |
SearchNews Archives:
Monthly ArchivesRecent Entries
For comprehensive internet |
|||||||||||||||||||||||||||||||||||||||||||||
|
All content © Copyright 2004 Brian Turner. All rights reserved. |
