The Origin Of Sobig (And Its Next Phase) 500
MrZeebo writes "According to this story at Canada.com, the FBI, along with other authorities, have traced the origin of the Sobig worm. The quick timeline: Apparently, an earlier version of the worm installed a backdoor on a home computer in British Columbia. The creator of the worm used this compromised computer to create a Usenet account with Easynews.com in Phoenix, using a stolen credit card. The worm spread from Usenet, and contained the IP addresses of 20 computers to contact on Friday, and to download an unknown program from those computers. Officials were able to take 19 of these computers offline before the mass-download. However, the 20th computer stayed online, and many copies of the worm were able to get the rogue program. Those that did were merely redirected to a porn site, no damage done. However, now infected computers will continue to try and connect to the other 19 every Friday and Sunday until the worm expires on Sept. 10th." Reader muldoonaz points out this brief Reuters story about the investigation, too.
Re: Wicked screensaver (Score:4, Funny)
Re: Wicked screensaver (Score:5, Funny)
Re:Another day, another worm (Score:1, Funny)
Of course not you tool. This worm spread VIA USENET AND E-MAIL. Christ, RTFA before spouting your anti-MS BS.
Re:What a nice guy though (Score:5, Funny)
We only have 48 hours to shut down 20 randomn computers or the internet is brought to it's knees.
Already exists (Score:4, Funny)
Re:What a nice guy though (Score:2, Funny)
No Problems Here (Score:4, Funny)
this is why (Score:5, Funny)
Re:Stupid, Offtopic, Newbie, Question (Score:4, Funny)
You see, a virus is what we doctors call
very very small. So small it could not possibly have made off with a
whole leg.
Who cares about the virus.... (Score:3, Funny)
Which porn site was affected? I need to find out for er... damage control, yeah!
Re: What a nice guy though (Score:2, Funny)
> Anyone else think this sounds like a bad hollywood plot? We only have 48 hours to shut down 20 randomn computers or the internet is brought to it's knees.
Worm author sells movie rights to pay legal fees...
Re:Idiots. (Score:4, Funny)
-----
Come on, if you're going to write an OS, do it right.
Don't use 20 predetermined machines from which to fetch updates; generate an unstructured network while you're spreading (remember who sued you, and trade alliances randomly).
Don't fetch and install any updates provided to you; use RSA signatures to verify that they are legitimate.
Don't use canned, easy to filter, subject lines in your email messages; borrow subject lines from your host's mail spool (optionally, do so with only a small probability -- let evolution determine which subject lines are the most effective).
In short: If you're going to release some software which you want to see on millions of machines around the world, try not to embarrass yourself.
Re:Movie - dear god, it's the plot of Hackers! (Score:1, Funny)
Ahh... nostalgia for things that have only just happened - that's what I love about being a science fiction fan!
Re:Sobig was created to defeat Bayesian Filters. (Score:3, Funny)
I received an email a few days ago from someone who says that they can help you with this problem...
Re:What a nice guy though (Score:2, Funny)
You just like saying schadenfeude (Score:3, Funny)
Re: Wicked screensaver (Score:5, Funny)
Re:Question (Score:4, Funny)
Re: y'know what I'm wondering... (Score:3, Funny)
> Is why any virus writers ever get caught. [...] they simply have to go down to their local library and/or cyber cafe wearing a wig and makeup, stick the floppy in, click, then leave, what's the problem?
I used to do that, but I got tired of having all the geeks try to pick me up while I was there.
This is what the writer should have done. (Score:4, Funny)
No damage (Score:5, Funny)
No damage done! My dear poor mother got redirected to goatse.cx! The psychiatry bills alone will cost a quarter of a million dollars.
Re:Nobody seems to care. (Score:3, Funny)
Re:Question (Score:2, Funny)
Re: Wicked screensaver (Score:3, Funny)
Re: Wicked screensaver (Score:1, Funny)
Re:Quit using C/C++, lose the buffer overflows (Score:3, Funny)
Whoah ! Where people able to understand what you told them ? Like, " 'mon ! hek that web page and ut n' paste the ommon errors !" But that's nothing ! I gave up with all vowels ! (ppl tnd t thnk spk lk n nsct, thgh).
Re:Another day, another worm (Score:1, Funny)
The Microsoft "O/S" has certainly bloated over the years, and is probably the main problem. As with any code shop, the biggest goal is just to get it to work!! Millions of lines of code, thousands of programmers, just organizing it sounds scary. And we always hear about the dates slipping -- and that's just to get it working in a non buggish sorta way. I doubt this leaves much time to try and figure out ways it can be exploited!
I could go on, but I really wanted to respond about your Palladium comment. Usually when I read stories about viruses, hacks, etc, I smile. Not maliciously, but just in the spirit of the hack. But lately, this kind of shit just makes me concerned that this will slide us into DRM. And that's bad.
By the way, isn't this an Outlook Explorer problem, and not really an OS problem? I was just wondering because I run Win98 on two main machines, without a virus checker. And have never been hit with these bad viruses. But I also sit behind a Linksys firewall, Zonealarm, use web-base email only, and don't click on EXE & SCR's.
Good point... (Score:1, Funny)
Re:Another day, another worm (Score:3, Funny)
(Go ahead and make fun of the following thought process...)
---Gunsmiths make Guns = MS makes OS
---Bulletsmiths make Bullets = Virus writers make viruses
---Dumb people look at the bullet through the barrel and pull the trigger = Dumb people click on *.pif, *.scr
Re:Correction (Score:4, Funny)
Newsman: Next up on our program--when l33t sp33k meets Engrish [engrish.com]
Example [engrish.com]: !4ANG3R! A d@n93r0u5 +0y. +h15 +0y 15 b31n9 m@d3 4 +h3 x+r3m3 pr10r1+y +h3 900d luk5. The l1++l3 p@rt wh1ch 5uph0c@+35 when the sharp p@r+ which 93+5 hurt 15 5w@ll0w3d is c0n+@1n3d 93n3r0u5ly. 0n1y the p3r50n wh0 c@n +@k3 r35p0n51b1l1+y by 1+53lph 15 +0 p1@y.
You may now gibber.
Got you beat (Score:1, Funny)
Re:What a nice guy though (Score:1, Funny)