Anti-virus firms are warning about a Windows worm called Sober that is starting to spread widely online. The virus emerged at the weekend and is multiplying because so many versions of Windows are vulnerable. Many people are thought to be falling victim to it because one version poses as an update from anti-virus firms. It also tries to hide by using many different subject lines in both German and English and by changing the name of the payload holding the virus. Other subject lines used by Sober try to trick people into opening the message by looking like a warning that they are sending out e-mail messages infected with a virus. Sober also re-uses subject lines seen in older viruses but again tries to fool users by adding comments that make messages bearing them look benign. The payload that an infected message bears also changes its name regularly to disguise the fact that it hides a virus. Full Story
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.