worm using Google to spread

‘Santy.a’ is spreading at a pretty impressive clip according to major anti-virus firms. In what may seem like a novel approach to finding a victim, the Santy worm essentially searches google for it’s victims. Attacking a vulnerability discovered last week in variants of phpBB, the worm uses a google search to identify users of the software.

Almost 40,000 sites may have already been infected. Using Microsoft’s Search engine to scan for the phrase “NeverEverNoSanity”–part of the defacement text that the Santy worm uses to replace files on infected Web sites–returns nearly 39,000 hits.

Will the folks at google ever run out of innovative ways to make peoples lives easier? Now they’re even helping script kiddies work more efficiently.

link

  • Digg
  • Reddit
  • Facebook
  • StumbleUpon
  • del.icio.us

Comments

2 Responses to “worm using Google to spread”

  1. radioball dot net » Blog Archive » Just in time for the holiday slump! It’s anti-santy! on December 31st, 2004 5:20 pm

    [...] s anti-santy!

    Ok so worm writers are getting kinda funny. As a follow up to this earlier story about the santy worm; we have the anti-santy worm which [...]

  2. radioball dot net on January 4th, 2005 3:35 pm

    Just in time for the holiday slump! It’s anti-santy!
    Ok so worm writers are getting kinda funny. As a follow up to this earlier story about the santy worm; we have the anti-santy worm which is hunting down machines with phpbb and patching them. How nice. Still creepy, but nice.

    link



Leave a Reply