Re: First WMF mass mailer ItW (phishing Trojan)

[Valdis.Kletnieks () vt edu]

On Thu, 16 Feb 2006 15:03:56 GMT, Vulnerability Management said:
> How can this be called a worm? AFAIK, malware that needs human 
> intervention to spread is a trojan, not a worm.

Enough users will just click 'OK' that it can effectively be considered
automatic enough to be classified a worm, not a trojan.

I mean - let's be realistic here. A worm that only manages 20% of the time to
turn off the A/V via pre-programmed means so it can continue propagating is
still clearly a worm (albiet a buggy one).  The mere fact that some worms use a
pre-programmed means to bypass the A/V that includes liveware muscular
activity(*) shouldn't eliminate its claim to wormhood....

(*) And yes, "just click OK" *is* sufficiently pre-programmed as to qualify as
automatic.  That's the *PROBLEM*... ;)

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/