Hackers eye virus as base for development
vnunet.com, 24 Sep 2002
Barely 24 hours after the Slapper B worm started to show up on antivirus monitoring stations, a new variant has cropped up.
According to security specialist ISS, Slapper C has infected 1,500 servers already and is spreading, although a source point has not been identified at this time.
The company warned that the source code for Slapper has spread quickly among the underground community, and will be the development platform of choice for future attacks.
Slapper and its variants exploit a vulnerability in the Secure Sockets Layer 2.0 of Apache web servers using distributions from Red Hat, Mandrake, SuSE, Gentoo and Slackware. Its suspected creator was arrested in the Ukraine on Wednesday.
"We're still analysing this but it doesn't look to be significantly different from the B variant," said Jack Clark from Network Associates' AVERT monitoring centre.
"Get your Apache systems patched and update your antivirus software and you should be fine."
A patch for all current variants is available from distributors.
But a new variant is already out there
Internet on yellow alert
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
Join our live chat session on Thursday at 11am to...
Researchers from security firm FireEye have been able to effectively...
Do you agree?
Have your say on this article