Advertisement
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
All quiet on the Sober front

By Tom Espiner, ZDNet UK
January 09, 2006
URL: http://www.zdnet.com.au/news/security/soa/All-quiet-on-the-Sober-front/0,130061744,139231788,00.htm


The Sober attack predicted for last Friday has not happened, possibly because of the publicity surrounding the potential outbreak.

PCs that were infected by Sober in November had the potential to download malicious code from certain Web sites and then launch a new wave of viruses on 6 January.

Experts from F-Secure confirmed on Friday that they have not seen any evidence of an attack.

"It's great! This is good news," Mikko Hyppönen, director of antivirus research at F-Secure, said.

"We've been monitoring the locations of the files that infected machines are now trying to download. So far none of them have activated," said Hyppönen.

MessageLabs also confirmed that it had seen no successful attack,

"We've not seen anything. This is what we envisioned would happen. Everyone knew about [the imminent attack], and took steps to mitigate the effects. The virus writer is probably running scared. It's great -- everybody in the antivirus community helped each other out. It would be good to do this with more malware," said Mark Toshack, manager of antivirus operations at MessageLabs.

But F-Secure warned that now was not the time to be complacent, as the hacker could still try to activate the download routine.

"The Sober guy laid low, but he might publish a little later. We've seen secondary download routines with other variants uploaded by the writer when he's ready -- so perhaps he's still writing it. It doesn't necessarily mean he won't activate the threat in the future."

ZDNet UK's Tom Espiner reported from London. For more coverage from ZDNet UK, click here.


Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved.
ZDNET is a registered service mark of CBS Interactive. ZDNET Logo is a service mark of CBS Interactive.