Beware! New Sober versions

Beware of .exe files within mailed .zip archives, there are two or three very dangerous Sober virus variants starting to spread over the internet, STILL UNDETECTED by most antivirus apps.

It is good to block Windows executable files within attached archives (mostly .zip) if you haven't set it up yet.

Some of the file names are:

screen_photo.zip with Screen_Photo.jpeg-graphic1.exe
regis.info.zip

KlassenFoto.zip
pword_change.zip

Inside the ZIP archive is a file named PW_Klass.Pic.packed-bitmap.exe.

etc.

More info here:

http://isc.sans.org/diary.php?date=2005-10-06
http://securityresponse.symantec.com...ober.q@mm.html

 

 

 

 

Top