Today, the
F-Secure's team
released a neat world map with the Nyxem.E infections. As you can see
the U.S and Europe have been most successfully targeted, but I wonder
would it be the same given the author started
localizing the subject/body
messages
found within the worm to other languages? Who seeks to cause damage
instead of controlling information and network assets these days? A
pissed off commodities trader? :) or on request, as the
original version of the worm
"can perform a Denial of Service (DoS) attack on the New York
Mercantile Exchange website (www.nymex.com)", still that's 2 years ago.
Tomorrow
is the day when the worm should originally start deleting all all
*.doc, *.xls, *.mdb, *.mde, *.ppt, *.pps, *.zip, *.rar, *.pdf, *.psd and
*.dmp on an infected PC's,
supposedly network drives as well,
what I also expect is more devastation on the 3rd of March given the
same happens every month. And while I doubt there's still someone out
there unaware of this, perhaps, released under "revenge mode" malware,
check out
Internet Storm Center's summary, and
know know your enemy, hopefully not until next month again!
UPDATE : You can actually go through another post in order to update yourself with some
recent malware developments.
About Dancho Danchev
Independent Security Consultancy, Threat Intelligence Analysis (OSINT/Cyber Counter Intelligence) and Competitive Intelligence research on demand. Insightful, unbiased, and client-tailored assessments, neatly communicated in the form of interactive reports - because anticipating the emerging threatscape is what shapes the big picture at the end of the day. Approach me at dancho.danchev@hush.com