p2pnet.net News:- Google’s blocking of “certain” search queries has stopped the Santy worm, “but the public release of the worm’s source code could lead to new attacks, security experts warned on Wednesday,” says eWeek.

Net-Worm.Perl.Santy.A uses Google search to find sites running vulnerable versions of phpBB. When it find one it likes, it overwrites files such as .htm .php .asp .shtm .jsp .phtm, replacing them with the message:

This site is defaced!!!
NeverEverNoSanity WebWorm generation X

===================

See:-
stopped – Google Nukes Santy Worm, But Threat Remains, eWeek, December 20, 2004

phpBB - Santy worm likes Googling, p2pnet, December 21, 2004

This entry was posted on Wednesday, December 22nd, 2004 at 11:49 pm and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

HOME

Viewed 15354 times