|
||
12/27: Worm_Santy-F Targets phpBB Applications Trend Micro is reporting Worm_Santy.F is rapidly spreading in the wild. Initial analysis of samples of this worm indicates it spreads on Web servers running the popular phpBB application. Individual end-user systems are unaffected.
This worm uses the Web search engine Google to find other hosts. Part of the search string it uses contains viewtopic.php.
It also attempts to start an IRC bot to connect to a specified server on TCP port 6667 to give access to a remote attacker.
Technical details can be found at Trend Micro page.
|
||
|