Quantcast Worm Spreads Via Google
ubergizmo

Worm Spreads Via Google

Posted on Dec 21, 04 11:05 PM PDT

 A virus is using the Google search engine to find sites using a particular bulletin board system (phpBB), to infect them.

The worm is named Santy.A and does not affect individual computers like yours or mine (phew!). It rather infects servers hosting phpBB. Once in place, the virus attacks files with the extensions HTM, PHP, ASP, SHTM, JSP, and PHTM and overwrites them with the text "This site is defaced!!! This site is defaced!!! NeverEverNoSanity WebWorm generation".

Santy.A is using a vulnerability in the PHP scripting language that was already patched, hence the importance of keeping up with security updates… It is hoped that Google can prevent the virus to spread further.

[pcworld]


Add a comment



Your Comments

Comments will be published immediately if you use a Disqus, Facebook or Twitter account. Anonymous comments will be moderated.

blog comments powered by Disqus

Featured Posts


Top Stories


Advertisement