Sophos experts have advised customers about a new email-aware worm that has an unusual payload. Not only does it attempt to disinfect computers of another worm but it also contains a message disparaging another virus writer. W32/Sahay-A is an email-aware worm that spreads via a screensaver called MathMagic.scr. If users run the attachment it drops a file called yahasux.vbs onto the hard drive which then forwards the virus onto everyone in the Windows address book. The virus goes on to attempt to disinfect any infections of W32/Yaha-K it may find. However, due to bugs it may fail to do this correctly. W32/Sahay-A appears to be written by the female virus writer Gigabyte, believed to be based in Belgium. In the past Gigabyte has gained herself considerable notoriety by being a rare example of a female writing viruses in a pastime dominated by young males. Full Story
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.