JUICY------->Sobig.F Worm Believed to Start at Web Porn Site - GoFuckYourself.com

Juicy D. Links · 08-22-2003, 06:28 PM

http://www.yahoo.com/juicylinks/guidonews/index.html

SAN FRANCISCO (Reuters) - Computer security experts thwarted an attack by computer worm Sobig.F on Friday just as the FBI (news - web sites) subpoenaed an Arizona Internet service provider in order to trace the fast-spreading virus experts believe was first posted on an adult-oriented Web site.

One expert said the Sobig.F e-mail virus was disguised so that anyone who clicked on a link purporting to show a sexually graphic picture became infected with the self-replicating worm, which then spread itself to other e-mail addresses.

"Sobig.F was first posted to a porn Usenet group," said Jimmy Kuo, research fellow at anti-virus software maker Network Associates Inc. Usenet is a popular forum on the Internet where computer users with similar interests post and read messages.

So far, as many as 100,000 computers have been infected with Sobig.F, which in turn has spewed "millions upon millions of infected e-mails" to other Internet users, Kuo added.

Sobig.F spreads when unsuspecting computer users open file attachments in e-mails that contain such familiar headings as "Thank You!," "Re: Details" or "Re: That Movie."

Once the file is opened, Sobig.F resends itself to e-mail addresses from the infected computer and signs the e-mail using a random name and address from the computer's address book.

Since Monday, computer users from Korea to Norway have struggled to fend off attacks that have crippled corporate e-mail networks and have filled home users' inboxes with a glut of messages, before fanning out to find more victims.

Consulting firm Booz Allen Hamilton, Air Canada, transport company CSX Corp. are among hundreds of companies that have suffered network attacks from recent viruses.

ATTACKS, SHUTDOWNS, NEW THREATS

Employees at the New York Times headquarters in midtown Manhattan were asked to shut down their computers, but a spokesman declined to comment on the cause of the shutdown.

"We will not speculate on the cause, effect or scope of the problem ... We plan to get the paper out tomorrow."

Sobig.F was written to expire on Sept. 10, but experts said they expect another version to follow. This is the sixth version of the portentously named virus since it first appeared in January.

The worm has been clogging e-mail inboxes with a hidden command directing infected PCs to make contact with one of 20 vulnerable computers at 12:00 PT California time every Friday and Sunday until it expires, said Steve Trilling, chief researcher at anti-virus vendor Symantec Corp. .

Government and industry security experts raced against the clock on Friday to take offline 19 of the 20 home computers, thwarting an attack before the 12 noon deadline, said Mikko Hypponen, anti-virus research manager at F-Secure of Finland.

The computers were located in the United States, Canada and South Korea (news - web sites), he said. The remaining master computer, which was in the United States, was taken down shortly after the deadline, experts said.

Experts had worried that the timed attack would slow down Internet traffic and possibly set in motion a new set of commands to launch new attacks. However, they cautioned that it was too early to tell whether the threat of Sobig.F had ended. The next expected attack could spur new problems, they said.

Internet service provider Easynews.com of Phoenix, Arizona said it had been contacted by investigators by telephone on Thursday and the company was issued a subpoena on Friday.

"It looks like the original variant was posted through us to Usenet on the 18th (of August)," Michael Minor, the Internet service provider's chief technology officer, told Reuters.

An FBI spokesman said the organization was working with the U.S. Department of Homeland Security to investigate who was behind the e-mail attacks. He declined to comment further. (Additional reporting by Eric Auchard, Kenneth Li and Derek Caney in New York, Tim McLaughlin in Boston, Jim Christie and Andrea Orr in San Francisco and Bernhard Warner in London)

Fletch XXX · 08-22-2003, 06:31 PM

Here we go...

Juicy D. Links · 08-22-2003, 06:32 PM

Quote:

Originally posted by Fletch XXX
Here we go...

Notice "Lil2rich" dissapeared right about the time this story broke?

completetosser · 08-22-2003, 06:36 PM

I must read the guidonews more often

a1ka1ine · 08-22-2003, 06:45 PM

i heard that it has spread to infect military networks now, and that the US are planning to use an experimental new artificial intelligence program to shut the virus down.

Juicy D. Links · 08-22-2003, 06:47 PM

Quote:

Originally posted by a1ka1ine
i heard that it has spread to infect military networks now, and that the US are planning to use an experimental new artificial intelligence program to shut the virus down.

Nope lil2rich is gonna lecture to the worm about TGP's and make him die of boredom

Mr.Fiction · 08-22-2003, 06:49 PM

Quote:

Originally posted by juicylinks

"Sobig.F was first posted to a porn Usenet group," said Jimmy Kuo, research fellow at anti-virus software maker Network Associates Inc. Usenet is a popular forum on the Internet where computer users with similar interests post and read messages.

Usenet is not a porn site.

Juicy D. Links · 08-22-2003, 06:55 PM

Quote:

Originally posted by Mr.Fiction

Usenet is not a porn site.

WHat are you talking about? Thats lil2rich's main content provider

Zebra · 08-22-2003, 06:57 PM

Quote:

Originally posted by a1ka1ine
i heard that it has spread to infect military networks now, and that the US are planning to use an experimental new artificial intelligence program to shut the virus down.

Isn't this how Terminator started? When is judgement day?!?

plexer · 08-22-2003, 07:06 PM

fuck the worm....

a1ka1ine · 08-22-2003, 07:52 PM

Quote:

Originally posted by Zebra

Isn't this how Terminator started? When is judgement day?!?

*holds on to his hat*

08-22-2003, 06:28 PM	#1
Juicy D. Links So Fucking Banned Industry Role: Join Date: Apr 2001 Location: N.Y. -Long Island -- Posts: 122,992	JUICY------->Sobig.F Worm Believed to Start at Web Porn Site http://www.yahoo.com/juicylinks/guidonews/index.html SAN FRANCISCO (Reuters) - Computer security experts thwarted an attack by computer worm Sobig.F on Friday just as the FBI (news - web sites) subpoenaed an Arizona Internet service provider in order to trace the fast-spreading virus experts believe was first posted on an adult-oriented Web site. One expert said the Sobig.F e-mail virus was disguised so that anyone who clicked on a link purporting to show a sexually graphic picture became infected with the self-replicating worm, which then spread itself to other e-mail addresses. "Sobig.F was first posted to a porn Usenet group," said Jimmy Kuo, research fellow at anti-virus software maker Network Associates Inc. Usenet is a popular forum on the Internet where computer users with similar interests post and read messages. So far, as many as 100,000 computers have been infected with Sobig.F, which in turn has spewed "millions upon millions of infected e-mails" to other Internet users, Kuo added. Sobig.F spreads when unsuspecting computer users open file attachments in e-mails that contain such familiar headings as "Thank You!," "Re: Details" or "Re: That Movie." Once the file is opened, Sobig.F resends itself to e-mail addresses from the infected computer and signs the e-mail using a random name and address from the computer's address book. Since Monday, computer users from Korea to Norway have struggled to fend off attacks that have crippled corporate e-mail networks and have filled home users' inboxes with a glut of messages, before fanning out to find more victims. Consulting firm Booz Allen Hamilton, Air Canada, transport company CSX Corp. are among hundreds of companies that have suffered network attacks from recent viruses. ATTACKS, SHUTDOWNS, NEW THREATS Employees at the New York Times headquarters in midtown Manhattan were asked to shut down their computers, but a spokesman declined to comment on the cause of the shutdown. "We will not speculate on the cause, effect or scope of the problem ... We plan to get the paper out tomorrow." Sobig.F was written to expire on Sept. 10, but experts said they expect another version to follow. This is the sixth version of the portentously named virus since it first appeared in January. The worm has been clogging e-mail inboxes with a hidden command directing infected PCs to make contact with one of 20 vulnerable computers at 12:00 PT California time every Friday and Sunday until it expires, said Steve Trilling, chief researcher at anti-virus vendor Symantec Corp. . Government and industry security experts raced against the clock on Friday to take offline 19 of the 20 home computers, thwarting an attack before the 12 noon deadline, said Mikko Hypponen, anti-virus research manager at F-Secure of Finland. The computers were located in the United States, Canada and South Korea (news - web sites), he said. The remaining master computer, which was in the United States, was taken down shortly after the deadline, experts said. Experts had worried that the timed attack would slow down Internet traffic and possibly set in motion a new set of commands to launch new attacks. However, they cautioned that it was too early to tell whether the threat of Sobig.F had ended. The next expected attack could spur new problems, they said. Internet service provider Easynews.com of Phoenix, Arizona said it had been contacted by investigators by telephone on Thursday and the company was issued a subpoena on Friday. "It looks like the original variant was posted through us to Usenet on the 18th (of August)," Michael Minor, the Internet service provider's chief technology officer, told Reuters. An FBI spokesman said the organization was working with the U.S. Department of Homeland Security to investigate who was behind the e-mail attacks. He declined to comment further. (Additional reporting by Eric Auchard, Kenneth Li and Derek Caney in New York, Tim McLaughlin in Boston, Jim Christie and Andrea Orr in San Francisco and Bernhard Warner in London)

08-22-2003, 06:31 PM	#2
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	Here we go... __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

08-22-2003, 06:36 PM	#4
completetosser Confirmed User Join Date: Jan 2003 Location: Planet Earth Posts: 1,419	I must read the guidonews more often __________________

08-22-2003, 07:06 PM	#10
plexer Confirmed User Join Date: Oct 2002 Location: NJ/AZ Posts: 1,339	fuck the worm.... __________________ I'M FREEEEE!!!!

08-22-2003, 06:45 PM	#5
a1ka1ine Confirmed User Industry Role: Join Date: Apr 2002 Posts: 3,387	i heard that it has spread to infect military networks now, and that the US are planning to use an experimental new artificial intelligence program to shut the virus down.