To think the Microsoft ANI exploit and the botnet things were bad but this just top the charts, this new variation of the Storm virus of last year gets a new powerful punch. The virus gets sent through a password protected zip fil in which the password is contain in a image file in the email. The email subject contains either Worm Alert!" or "Trojan Detected! so do not open and just delete it. Also the image file will read something like UrgentNotice.gif" or "AbuseReport.gif. and the zip file will read something like "patch-####.zip" or "removal-####.zip.".


McAfee states that this virus requires some interaction in order ot be trigger, because the email stats that your computer is infected and that you must run this patch or a removal tool in order to be protected. They do mention people are still falling for it. In fact 20,000 computers alone got affected on thursday alone and they expect more to be affected as the days and weeks go by.

Here is the technical talk about this worm



That that is just plain scary right their on the fact that this new version can escape the anti virus software detection, and soem security research even mention that anti-virus software is no longer adaquate to prectect users especially if people are still fallen for the same old tactics when a virus comes out. Right now their are no known patches or updates to prect people so be on the look out for this bad boy.


SOURCES
Here
Here

Oh. Thanks for warning us

Well it seems the Storm Worm has become a rather nasty customer recently, the worm has created a botnet of almost 2 million computers and almost 500 million emails that connect to the worm have been tracked. However, what's got the security people are worried about is the possibility of a large scale DOS attack, and from they mention since there are enough computers a small country's computer network could get shutdown. So far or small DOS attacks have been associated with this worm, so far the only suggestions that have come up is make sure your expecting emails with attachments and all that good stuff, block P2P networking since it seems do it's best damage(infection) that way.

So I would say to the members here to be extra precaution in your activities concerning all that fun stuff .

SOURCE

Here

It seems the Storm Worm has gotten a bit more smarter as it keeps on morphing and trapping more people as the authors are changing the way the emails are being sent out.



So basically if you want to keep your computer zombie bot free really look at emails that your friends sent or you don't know who the person is. Of course people are smart enough to not open up spam that say you won a thousands dollars. By the looks of it, the security teams have so far not broken the worm to either patch or finally disable it, so watch your email accounts more carefully.

SOURCE
Here
Here

This post has been edited by Saint_Michael: Aug 23 2007, 03:10 PM

Thanks for the warning Mike. Gotta be more careful with 'em emails now.