Media releases are provided as is by companies and have not been edited or checked for accuracy. Any queries should be directed to the company itself.

Spamming Sober-Q Trojan Horse Stopped Proactively by Sophos Genotype Technology

  • 17 May, 2005 10:59

<p>Experts at SophosLabs, Sophos's global network of virus and spam analysis centres, have successfully protected against the latest update to the Sober worm, using proactive technology.</p>
<p>The Troj/Sober-Q Trojan horse is being used to send out German nationalistic spam from PCs previously infected by the Sober-N worm.</p>
<p>It appears that the Sober-N worm which spread very widely, accounting for nearly 80 per cent of reports in early May, was used to infect as many PCs as possible by posing as tickets for the 2006 World Cup in Germany. The many compromised PCs are now being used to send out masses of spam.</p>
<p>Spam sent by the Trojan horse from infected PCs uses various subject lines including: 'Dresden Bombing Is To Be Regretted Enormously', 'Armenian Genocide Plagues Ankara 90 Years On', 'Dresden 1945' and 'Turkish Tabloid Enrages Germany with Nazi Comparisons'.</p>
<p>The Trojan drops a file onto infected PCs including links to online news stories about previous versions of the Sober worm and the text: 'Ich bin immer noch kein Spammer! Aber sollte vielleicht einer werden :)', which translates to 'I'm not a spammer, but perhaps I should become one :)'.</p>
<p>"Thousands of innocent computer users are unknowingly spewing out this unwanted mail as the Sober author has taken control of their PCs," said Graham Cluley, senior technology consultant at Sophos. "By including links to news stories about previous variants of the Sober worms, it seems that the author is looking for notoriety, but it's unlikely that the thousands deluged with this spam will take kindly to his tactics. This latest piece of malware highlights the links between virus writers and spammers and reinforces the need for everyone to deploy regularly updated anti-virus and anti-spam software as well as a firewall."</p>
<p>Sophos's proactive Genotype technology was capable of detecting the Trojan horse proactively (naming it as W32/Sober-Gen), defending customers' computers without requiring an update. Sophos PureMessage, Sophos's consolidated email gateway solution which defends businesses against both spam and viruses, can also block the spam messages sent by the Trojan horse.</p>
<p>ends</p>
<p>http://www.sophos.com.au</p>
<p>FOR FURTHER INFORMATION:
Sean Richmond (sean.richmond@sophos.com.au) is available for comment:
+61 2 9409 9100 (tel)
+61 2 9409 9191 (fax)</p>
<p>Sophos's press contact at Gotley Nix Evans is:
Michael Henderson (sophos@gne.com.au)
+61 2 9957 5555 (tel)
+61 413 054 738 (mob)
+61 2 9957 5575 (fax)</p>

Most Popular

Most Popular Reviews

Join the newsletter!

Error: Please check your email address.

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?