Latest virus attempts to cover tracks as bounty hunt continues A worm that started spreading on Sunday places the source code for the original MyDoom virus on victims’ hard drives, an action equivalent to planting evidence, antivirus experts said Tuesday. The worm, Doomjuice, spreads to computers that have already been infected by either the original MyDoom virus or the MyDoom.B variant, and among other actions, places several copies of the source code for MyDoom.A on a victim’s computer. The author may be using the tactic to create a crowd of PC users in which to hide, or the author could be spreading the code in hopes that other virus writers will create variations on MyDoom, said Graham Cluley, senior technology consultant for antivirus company Sophos. “If he has spread his code around the net onto innocent computers in an attempt to hide in the crowd, then he’s more sneaky than the average virus writer,” Cluley said in a statement. Full Story
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.