Thursday, 6 September 2007

storm worm: all change :)

Heads up, new storm worm incoming... oooooh... the RIAA are after everybody and worryingly
some people might fall for this one:

when you click on the given link, you get taken to this page, asking you to download an exe file:

Current detection is a little patchy:

So far, the following Sanesecurity signatures match the variants seen so far:


No comments: