Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: InfoSec Handlers Diary Blog - New version of Netsky InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

New version of Netsky

Published: 2004-03-07
Last Updated: 2004-03-08 11:35:07 UTC
by Lorna Hutcheson (Version: 1)
0 comment(s)
New version of Netsky

Netsky has a new version that is called W32.Netsky.I@mm by Symantec. The new version was discovered today and Symantec has released an updated definition for it. This version does the same as the rest, however subject lines make it more enticing for a user to open. The From line is service@yahoo.com and consists of one of three different subjects or body lines that lead the user to believe their account with Yahoo has been closed. There is an attachment that appears like a valid link to Yahoo for the user to click on to reactivate their account.

For more information see:

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.i@mm.html
Handler on Duty: Lorna Hutcheson
Keywords:
0 comment(s)
Diary Archives