RealNews

Clues point to single MyDoom culprit

The two versions of the MyDoom virus may have the same parent, according to a security researcher. The name “andy” left in the code by the author of the MyDoom virus links the original program released a week ago with the B variant sent out two days later, Jimmy Kuo, McAfee fellow for security company Network Associates, said on Monday. Other hints, including numbers that appear to designate the version of the program, indicate that the fast-spreading virus was created by a professional programmer. “It looks like what someone would write when they check in source code,” said Kuo, who has been researching the virus. “The interpretation is that ‘andy’ is the person checking the code in.” In addition, the author left a message in the second version of the virus for those with PCs infected with the program: “I’m just doing my job, nothing personal, sorry.” Full Story

OODA Analyst

OODA Analyst

OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.