The FBI CyberSecurity Agency issued a warning early Tuesday morning of possible
Denial-of-Service (DDOS) attacks and a new worm virus that is more aggressive
than the Code Red virus that attacked servers worldwide back in August.
Network outages, difficulties accessing websites, and poor Internet connectivity
has been reported throughout the world. These problems are not limited to specific
networks and may in fact be affecting all local area networks, gateway routers,
network routers, and VPNs connected to the Internet.
A suspected new worm virus may also be responsible for the Internet problems we
are seeing today. The following excerpt is from Symantec,
Symantec Security Response has received a number of submissions on
W32.Nimda.A.@mm and is rating it as a Category 4.
W32.Nimda.A@mm is a new mass-mailing worm that utilizes email to propagate
itself. The threat arrives as a file named readme.exe in an email.
In addition, the worm sends out probes to Microsoft IIS servers attempting to spread
itself by using the Unicode Web Traversal exploit similar to W32.BlueCode.Worm.
Compromised servers may display a webpage prompting a visitor to download an
Outlook file which contains the worm as an attachment.
Also, the worm will create an open network share allowing access to the system.
The worm will also attempt to spread via open network shares.
To read more about the W32.Nimda virus, go to Symantec's Security Response.
Please update your anti-virus software, and install the latest patches to prevent
being infected by any of these viruses. Servers running IIS must have the latest
Code Red patch installed. Reports that Novell and Linux systems are also vulnerable
to the problems described here, is unknown at this point.
|