|
|
 |
|
|
Pages: 1
Net worm using Google to spread
(Click here to view the original thread with full colors/images)
Posted by: Ion Silverbolt
ZDNet News has some info on a new worm that uses Google as a tool to spread.
A Web worm that identifies potential victims by searching Google is spreading among online bulletin boards using a vulnerable version of the program phpBB, security professionals said on Tuesday.
The Santy worm uses a flaw in the widely used community forum software known as the PHP Bulletin Board (phpBB) to spread, according to updated analyses. The worm searches Google for sites using a vulnerable version of the software, antivirus firm Kaspersky said in a statement.
Almost 40,000 sites may have already been infected. Using Microsoft's Search engine to scan for the phrase "NeverEverNoSanity"--part of the defacement text that the Santy worm uses to replace files on infected Web sites--returns nearly 39,000 hits.
"Santy.a is spreading rapidly," antivirus firm Kaspersky stated in a new release published Tuesday. "However, this does not directly affect users. Although the worm infects Web sites, it does not infect computers used to view those sites."
The worm sends Google a specific search request, essentially asking for a list of vulnerable sites. Armed with the list, the worm then attempts to spread to those sites using a PHP request designed to exploit the phpBB bulletin board software.
The worm is the latest twist on using Google as an attack tool, a practice known as Google hacking. It may also be the first time a program used Google to identify victims for an attack.
Around 6 million sites appear to be running the phpBB software, according to a search of Google for the phrase "Powered by phpBB"--an acknowledgment appended to the bottom of any site that uses the software.
Posted by: Boggy B
 Quote:
|
Almost 40,000 sites may have already been infected. Using Microsoft's Search engine to scan for the phrase "NeverEverNoSanity"--part of the defacement text that the Santy worm uses to replace files on infected Web sites--returns nearly 39,000 hits.
|
Or 3. This was the only defectee i could find. By "Microsoft's search engine" they mean MSN, right? Zero results on Google, for obvious reasons, i suppose the others blocked out that term for similar reasons.
Posted by: Ocean
wow, way to microsoft to really be the last great chance of the soon to be released version of this virus's last best chance for webwide propogation. or somethin
Posted by: Boggy B
EDIT: My bad.
|
|
|
|
|
