January 27, 2004

MyDoom / Novarg worm

Writeup in eWeek about the new email worm. My workplace was hit pretty hard by it yesterday with two people opening attachments without updating their anti-virus definitions... Wrote an email to all that was a bit excoriating... Anyway, the interesting part of this worm is not the infectious part but what infected systems start doing on February 1st: bq. But the real danger could lie in MyDoom's "time bomb" set to trigger a denial of service attack next month against the SCO Group Inc.'s Web site, experts say. bq. More alarming than the minor delays are the possible interruptions yet to come, Taylor said. Because MyDoom currently is an e-mail worm that requires a user to open an attachment in order for it to propagate, its overall effect on Internet performance has been limited. bq. But the worm's next planned attack—to harness the multitude of computers it has infected to trigger a DOS attack on SCO's Web site starting on Feb. 1—could hit the Internet's overall performance because of the massive amount of traffic it could generate, Taylor said. The article has some additional links at the bottom of the page that go to more information. Posted by DaveH at January 27, 2004 3:21 PM