4 ms·

All of the information I've seen about this "worm" comes from a single anti-virus vendor I've never heard of, and the information is painfully thin -- most crit

All of the information I've seen about this "worm" comes from a single anti-virus vendor I've never heard of, and the information is painfully thin -- most critically, there is no information at all on how it's spread. This particular headline (which, to be fair, does not come from the linked page) uses the word "exploit", but there is no evidence of what, if any, flaw is being exploited. "Worm" has a rather specific meaning. It's malware that self-propagates through a network. Strictly construed, the only way this can happen is if there is a security flaw being exploited. A looser definition includes things like the infamous "ILOVEYOU" "worm", that automatically distributes itself, but requires user interaction to infect a target. In this case, neither means of distribution is in evidence. At this point, I'm skeptical that this "worm" exists at all.

aespinoza 12y ago
VirusTotal has the analysis here: https://www.virustotal.com/en/file/43a929c2059440ea899baf47edcfb3ac764d3e0ef1bf4ba7917618e4821d9cb5/analysis/ https://www.virustotal.com/en/file/43a929c2059440ea899baf47e... It does exist, and it is detected by several vendors, not just Dr.Web.
- nknighthb 12y ago
  Well, that's not what I'd call an "analysis", and if that's really about the same "worm", it's at least 22 months old, not "new". First submission 2012-11-11 16:21:18 UTC ( 1 year, 10 months ago ) Last submission 2014-05-08 21:33:59 UTC ( 4 months, 3 weeks ago ) Sounds like a small-time vendor trying to make a name for itself by "dissecting" an old trojan. Maybe they want some extra revenue for christmas bonuses.
  - techrat 12y ago
    Yet the account mentioned in the article is 2 months old. http://www.reddit.com/user/vtnhiaovyd http://www.reddit.com/user/vtnhiaovyd
EugeneOZ 12y ago
one of the biggest russian av-vendors.
dsl 12y ago
Viruses and the like are often named after words or snippets researchers find while doing an investigation. It is possible the original developer called the project "iWorm" and so that is how they named it.

aespinoza 12y ago

VirusTotal has the analysis here: https://www.virustotal.com/en/file/43a929c2059440ea899baf47edcfb3ac764d3e0ef1bf4ba7917618e4821d9cb5/analysis/ https://www.virustotal.com/en/file/43a929c2059440ea899baf47e... It does exist, and it is detected by several vendors, not just Dr.Web.

nknighthb 12y ago
Well, that's not what I'd call an "analysis", and if that's really about the same "worm", it's at least 22 months old, not "new". First submission 2012-11-11 16:21:18 UTC ( 1 year, 10 months ago ) Last submission 2014-05-08 21:33:59 UTC ( 4 months, 3 weeks ago ) Sounds like a small-time vendor trying to make a name for itself by "dissecting" an old trojan. Maybe they want some extra revenue for christmas bonuses.
- techrat 12y ago
  Yet the account mentioned in the article is 2 months old. http://www.reddit.com/user/vtnhiaovyd http://www.reddit.com/user/vtnhiaovyd

EugeneOZ 12y ago

one of the biggest russian av-vendors.

dsl 12y ago

Viruses and the like are often named after words or snippets researchers find while doing an investigation. It is possible the original developer called the project "iWorm" and so that is how they named it.