SysChat

SysChat (http://www.syschat.com/forum.php)
-   News (http://www.syschat.com/news/)
-   -   New Bagle Email Worm Spreading via Encrypted Zip File (http://www.syschat.com/new-bagle-email-worm-spreading-via-969.html)

Sami 06-22-2006 01:37 AM

New Bagle Email Worm Spreading via Encrypted Zip File
 
Experts at SophosLabs™, Sophos's global network of virus, spyware and spam analysis centers, have announced the discovery of a new version of the Bagle worm spreading via email systems.

The W32/Bagle-KL worm spreads as a Zip email attachment, encrypted with a password. The randomly generated numerical password is communicated to the recipient by embedding an image into the email.

The emails invite the user to open the Zip file using a password.

The worm spreads via email using a subject line randomly chosen from 118 different names programmed into its code. The list of names includes:

Ann, Anthonie, Constance, Emanual, Frances, Geoffraie, Harrye, Humphrie, Judith, Margerie, Michael, Nicholas, Robert, Winifred, Johen, Thomas

Attached to the email are Zip files, which are created using the chosen name. Examples include:

Edmund.zip, Nicholaus.zip, Dorithie.zip, Henry.zip, Daniel.zip, Nycholas.zip, Judeth.zip, Sybyll.zip, Winifred.zip, Bennett.zip, and John.zip.

News Source: infozine.com


All times are GMT -4. The time now is 12:55 PM.


Copyright © 2005-2013 SysChat.com


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54