Zotob worm attacks clarified
p2pnet.net News:- F-Secure’s Katrin Tocheva has clarified the situation with respect to the Microsoft Plug-and-Play terror (MS05-039) that’s currently sweeping the Net.
It’s not a virus war, she says. It’s a bot war!
Eleven different samples of malware using this vulnerability have arrived at the company’s offices during the past four days, says Tocheva, going on:
“Currently there are three Zotob variants (.A, .B and .C), one Rbot (.YK), one Sdbot (.ADB), one CodBot, three IRCbots (.ES, .ET and .EX) and two variants of Bozori (.A, .B).”
And, “Variants from both IRCBot and Bozori families are deleting competing PnP bots. It seems there are two groups that are fighting: IRCBot and Bozori vs Zotobs and the other Bots.”
Below is F-Secure’s high-tech graphic illustration of exactly how who is killing what.
If there’s omething you think we should know, contact us – tips[at]p2pnet.net
See:-
Plug-and-Play terror – Microsoft Zotob wreaks havoc, August 17, 2005
F-Secure – This is not a viruswar, this is a botwar!, August 17, 2005
August 18th, 2005 at 8:23 pm
This is very strange indeed.
August 18th, 2005 at 8:52 pm
Someone got teed because their little play house got torn down.
Now its war, only the war is being fought with computers that aren’t theirs.
Sad state of affairs for windows users.
August 19th, 2005 at 10:09 am
It goes to show:
Kids will be kids…
August 19th, 2005 at 12:33 pm
GO GO GO!!! looks like he’s the only one of them damn zotobs stayin alive