02 May 2009
2. Sasser
Shaun Nichols: Just how much damage can a virus do? Well, take
the Sasser worm as one example. This relatively simple little attack managed to
cripple airlines, news agencies and even knocked out government systems.
Perhaps most frustrating, however, was that Sasser infection was very easy to
prevent. The vulnerability which the attack exploited had been patched for
months, and all users had to do was install the most recent security updates
from Microsoft.
Sasser was a stark warning that has yet to be heard by many. Unpatched systems
are still pervasive around the world, leaving users vulnerable to Sasser and
countless other malware attacks that target patched vulnerabilities.
Iain Thomson: I remember the Sasser outbreak well, as I was on holiday and staying with friends in New York when it struck. Being the token geek I spent a good few hours fixing my friend's computer and cursing the fool who wrote the worm that had me sitting in front of a computer screen when I could be sipping cocktails in Greenwich Village.
The worm caused havoc, not just shutting down a news agency's systems but causing Delta to cancel some flights and leaving the British coastguard crippled for hours, putting lives at risk. If I'd been a seaman in peril I'd want serious words with the 17-year old author, Sven Jaschan. He was caught after Microsoft put a bounty on his head, something they should do more often.
Jaschan got away with a suspended sentence because he wrote the code before reaching the age of 18. He also caused a storm by accepting a job with a security company in his German homeland. This is not done in the security industry and caused the company, Securepoint, to be shunned by others in the field
1. I Love You
Shaun Nichols: They say you always hurt the ones you love. In
2000, this was taken to extremes when the ILoveYou attack racked up some $5.5bn
in damages.
The concept was pretty simple: a user receives a file from a known email contact under the title 'LoveLetter' or 'ILoveYou'. When the attachment is opened, the virus is launched. After infecting the host, the virus then took control of the user's email program and sent the same 'ILoveYou' message to every user in the host's address book.
Love must have been in the air, because the virus was potent enough to infect some 10 per cent of internet-connected machines at its peak. At a time when many users were still trying to learn the finer points of the internet, ILoveYou was a major wakeup call to some of the dangers on the web.
Iain Thomson: Everybody wants to be loved and ILoveYou was brilliant social engineering. It helped that the virus was spammed out in the early days of internet use and there were a lot of newbies online who had only a vague idea about viruses and how dangerous they could be.
Email was a trusted format and, because the messages came from people the recipient actually knew, the likelihood of them being opened was much higher.
Things are different today, although there are still plenty of people who get caught by social engineering attacks, but ILoveYou makes it so high in the list because it was a brilliant piece of social engineering.
Latest stories from Security
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
Orange and Intel talk us through the ins and outs of their San Diego smartphone
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Are you looking for a new positing within the Testing...
A leading global provider of critical information to...
Want to work for one of the most dynamic, creative environments...
Want to work for one of the most dynamic, creative environments...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Good Read agreed lol
yeah i agree it was a very enlightening post and i never would think that the first well closest thing to a computer virus was around as early as the seventies damn lol, i'm suprised trojan didn't get a mention though then again some that you mentioned basically did the same thing as trojan but came under a different name.
Posted by: Mi11z 09 Jan 2010
Nice Article people
Real good read
Posted by: imerebus 02 Dec 2009
Good article
Good article, thanks for writing it up. Enjoyed reading it from 10 down to 1, very interesting.
Posted by: Jonni 02 Nov 2009
Missing major vx's
Melissa CIH Code Red Nimba Storm All should have been on the list
Posted by: avdude15 07 May 2009
WTF?!?
Where are number 1 and 2?
Posted by: Crudd 04 May 2009
So where is # 1 & # 2?
I'm confused - the article ends on page 5 with the 4th and 3rd viruses identified. Where are the 2nd and 1st ones listed? Seems like there's a page missing... Editor response: Apologies, a small hiccup in our system caused the last page to disappear. It has been fixed.
Posted by: EJ 04 May 2009
Good article
Interesting article, thanks. Randall Stross http://enhilex.com
Posted by: Randall Stross 03 May 2009
what a ranking...
where's CIH?
Posted by: XY 03 May 2009