Mytob writers could be creating a super bug

Virus writers responsible for the recent rash of Mytob worm variants could be creating a super worm.

Virus writers responsible for the recent rash of Mytob worm variants could be working on creating a super worm, a security researcher warned Friday.

The "HellBot" group behind the Mytob worms write programming instructions in their code that mirror the way developers work, said Sophos Security Consultant Carole Theriault.

"The only conclusion we can come up with is that they are working on a big super worm," Theriault said.

Since its discovery in February, the Mytob mass-mailing worm has spawned dozens of variants, each just slightly different, according to researchers.

However, each variant turns off an infected machine's security settings and blocks the user's access to security Web sites, Theriault said.

This makes it difficult to get help once a machine has been infected, and Trojan programs accompanying the worms could leave a backdoor open for attack, she said. One recent version included spyware and adware, which could be used to reap monetary benefits, according to antivirus company Trend Micro.

The Mytob authors have been "very busy," releasing multiple variants a day, McAfee noted. While the distribution of each variant is low, combined there is a lot of activity around them, researchers said.

Over 50 percent of the reported problems coming into Sophos over the last 24 hours have been about Mytob worms, Theriault said. Recent versions, discovered earlier in the week, include Mytob.bi, which poses as a message from an IT administrator, warning that the recipient's e-mail account is about to be suspended.

It scans the hard drive of an infected machine and sends copies of itself to e-mail addresses it finds in the Windows Address Book. It also prevents the machine from accessing several antivirus and security Web sites, and can open a random port, allowing a hacker to gain remote access.

While antivirus companies would normally have to update their software to guard against each new variant, the Mytob family is so close that multiple variants can be caught using generic definitions of the worm, Theriault said. However, users are advised to keep their antivirus software up-to-date.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Scarlet Pruitt

IDG News Service
Show Comments

Cool Tech

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Breitling Superocean Heritage Chronographe 44

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?