Latest Variants Of The Bagle

[echobay]

Three-stage Bagle named Glieder seeds, disarms and exploits from amigo

Thu Jun 02 @ 20:04 [2005-06-02 20:04:20] (Reads: 50)

Source: ZDNet UK

The latest variants of the Bagle worm have alarmed antivirus vendors because of the multi-stage process they use to attack PCs. The variants, which Computer Associates has given a new name — Glieder — because it says they are so different from previous Bagle worms, combine several elements in a way not seen before. In this staged approached, viruses seed their victims, then disarm them, and then finally exploit them. "We've seen blended threats before where a virus uses several methods to spread," said Computer Associates Australia security architect Chris Thomas, "but not like this." The Win32.Glieder worm spreads using a common mass-mailing method, relying on users to click on an attachment so it email itself on to names in the address book. "This is the beachhead," said Thomas. "The whole point is to get to as many victims as fast as possible with a lightweight piece of malware." On 1 June, CA saw eight variants released.

[handplane]

The beat keeps on!!!