Media releases are provided as is by companies and have not been edited or checked for accuracy. Any queries should be directed to the company itself.

Spamming Sober-Q Trojan Horse Stopped Proactively by Sophos Genotype Technology

  • 17 May, 2005 10:59

<p>Experts at SophosLabs, Sophos's global network of virus and spam analysis centres, have successfully protected against the latest update to the Sober worm, using proactive technology.</p>
<p>The Troj/Sober-Q Trojan horse is being used to send out German nationalistic spam from PCs previously infected by the Sober-N worm.</p>
<p>It appears that the Sober-N worm which spread very widely, accounting for nearly 80 per cent of reports in early May, was used to infect as many PCs as possible by posing as tickets for the 2006 World Cup in Germany. The many compromised PCs are now being used to send out masses of spam.</p>
<p>Spam sent by the Trojan horse from infected PCs uses various subject lines including: 'Dresden Bombing Is To Be Regretted Enormously', 'Armenian Genocide Plagues Ankara 90 Years On', 'Dresden 1945' and 'Turkish Tabloid Enrages Germany with Nazi Comparisons'.</p>
<p>The Trojan drops a file onto infected PCs including links to online news stories about previous versions of the Sober worm and the text: 'Ich bin immer noch kein Spammer! Aber sollte vielleicht einer werden :)', which translates to 'I'm not a spammer, but perhaps I should become one :)'.</p>
<p>"Thousands of innocent computer users are unknowingly spewing out this unwanted mail as the Sober author has taken control of their PCs," said Graham Cluley, senior technology consultant at Sophos. "By including links to news stories about previous variants of the Sober worms, it seems that the author is looking for notoriety, but it's unlikely that the thousands deluged with this spam will take kindly to his tactics. This latest piece of malware highlights the links between virus writers and spammers and reinforces the need for everyone to deploy regularly updated anti-virus and anti-spam software as well as a firewall."</p>
<p>Sophos's proactive Genotype technology was capable of detecting the Trojan horse proactively (naming it as W32/Sober-Gen), defending customers' computers without requiring an update. Sophos PureMessage, Sophos's consolidated email gateway solution which defends businesses against both spam and viruses, can also block the spam messages sent by the Trojan horse.</p>
<p>ends</p>
<p>http://www.sophos.com.au</p>
<p>FOR FURTHER INFORMATION:
Sean Richmond (sean.richmond@sophos.com.au) is available for comment:
+61 2 9409 9100 (tel)
+61 2 9409 9191 (fax)</p>
<p>Sophos's press contact at Gotley Nix Evans is:
Michael Henderson (sophos@gne.com.au)
+61 2 9957 5555 (tel)
+61 413 054 738 (mob)
+61 2 9957 5575 (fax)</p>

Most Popular

Brand Post

Shining a light on creativity

MSI has long pushed the boundaries of invention with its ever-evolving range of laptops but it has now pulled off a world first with the new MSI Creative 17.

Most Popular Reviews

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?