The Web    Google
12/27: Worm_Santy-F Targets phpBB Applications

12/27: Worm_Santy-F Targets phpBB Applications
December 27, 2004

Trend Micro is reporting Worm_Santy.F is rapidly spreading in the wild. Initial analysis of samples of this worm indicates it spreads on Web servers running the popular phpBB application. Individual end-user systems are unaffected.

This worm uses the Web search engine Google to find other hosts. Part of the search string it uses contains viewtopic.php.

It also attempts to start an IRC bot to connect to a specified server on TCP port 6667 to give access to a remote attacker.

Technical details can be found at Trend Micro page.

  • 6/14: Sober-H Emails Messages in German
  • Programmers on Windows Code: Eyes Wide Shut
  • 10/20: Mydoom-AA Worm Spreads Via Email
  • War Threat Threaded to Digital Attacks?
  • Web Services Security in .NET
  • 9/8: IRCBot-G Trojan Opens Backdoor
  • Fortinet To Deliver 3G Multifunction Security Appliance
  • Plenty of IM Security Holes Left to Plug
  • One in Three Companies Lack Disaster Recovery Strategy
  • Check Point Adds Application Protection To Firewall
  • Outtasking Solution to Company's Email Woes
  • Computer security background information