Gumblar attack worse than Conficker, experts warn | Tech News on ZDNet

Gumblar attack worse than Conficker, experts warn

By Elinor Mills CNET News
Posted on ZDNet News: May 29, 2009 4:52:30 AM

From the article...

ScanSafe contends that Gumblar is worse than Conficker, a worm that spreads via a hole in Windows through removable storage devices and network shares with weak passwords, as well as disabling security software and installing fake antivirus software.

Gumblar, which was responsible for 37 percent of all malware blocked by ScanSafe during the first two weeks in May, has more intrusive behavior — it intercepts and monitors web traffic, and installs a data-theft Trojan that steals user names and passwords from infected computers, ScanSafe said.

In addition, once a Conficker infection is remediated there is no further spread of the worm. However, Gumblar can use the FTP credentials it steals to compromise even more websites, potentially exposing many more victims, the company said.

Go there and read complete article...

http://news.zdnet.com/2100-9595_22-306268.html

Don