Saddam Hussein "death" virus on loose

[InfoSec News <isn () c4i org>]

http://www.theinquirer.net/?article=21080

By INQUIRER staff
03 February 2005

BRITISH ANTIVIRUS firm Sophos warned that a version of the Bobax-H 
worm is on the loose, disguised as pictures of a dead Saddam Hussein.
According to Sophos, the worm carries different message warnings such 
as "Saddam Hussein: Attempted Escape. Shot Dead".

Other versions carrying the same payload claim to have pictures of a 
captured Osama Bin Laden.

Sophos said the worm, if activated, carries the same payload as the 
Sasser worm exploited.

Graham Cluley, marketing director at Sophos, warned that many people 
opened emails to be abreast of the news.

But he also hit out at those responsible for the security of Windows 
machines for not taking advantage of the patches that protect against 
Bobax.



_________________________________________
Bellua Cyber Security Asia 2005 -
http://www.bellua.com/bcs2005