Trojan horse
Second email attack from same hacker in two days

Bagle variant floods inboxes worldwide

Mass spamming campaigns designed to spread Trojan malware

Written by Iain Thomson

Businesses are being urged to update their antivirus protection after the author of a new Bagle variant launched two mass spamming campaigns to spread the malware.

The BagleDL-U Trojan is enclosed in an email with no header. The message reads 'new price' and contains a zipped attachment.

Advertisement

Once installed it allows the computer to be used as part of a botnet of slave PCs controlled via IRC. It also shuts down any antivirus and anti-spam software and blocks access to security websites.

"This is the second massive email attack phase from this hacker in two days. He is intent on infecting as many people as possible," said Carole Theriault, senior security consultant at Sophos.

"All computer users must avoid opening unsolicited email attachments, and ensure that their antivirus protection is up to date.

"Businesses should also consider blocking all executable code from entering their networks via email. Most companies have no need to receive computer programs via this route, and it dramatically reduces the risk of infection."

The first wave of spammed emails went out between 2pm and 10pm on Monday, and a new phase began again at approximately 2pm yesterday.

All major security vendors now have a signature files for the Trojan, and customers are being urged to update their software immediately.

Bagle is one of the most popular pieces of malware in computer history. It first appeared in January last year and quickly topped the virus charts.

Its prevalence is due to the high number of virus tool kits available online with which people with little or no technical knowledge can create new variants. More than 100 have been detected so far.

Tags:

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Microsoft

Microsoft plans Silverlight 2.0 announcement

Web application tool revamp promised later today   More...

Stock prices

Security disclosures tip the stock market

Events such as Microsoft's Patch Tuesday could be used for...  More...

Blogs

Analyst predicts Web 2.0 fire sale

Prices for online apps could soon plummet, says Forrester   More...

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Primary Navigation