Sober Worm Attack set for Jan 6

[Executioner]

Computer users and system administrators, take note. According to iDefense, a division of VeriSign (Nasdaq: VRSN - news), on January 6, 2006, the world will see the release of a new version of the Sober worm. Security analysts hope that, at least in this instance, being forewarned can lead to being forearmed, and that computer users will take the time before the attack to update their security software.

Wonder how much of a mess this will cause, even with updated security software? If this is to happen, just be on the look out. And let people who are not savy w/ systems like your parents and some kids know not to go opening any emails....

http://news.yahoo.com/s/nf/20051212/tc_nf/40077

[Shadow250]

i just got this : Post@cia.gov You visit illegal websites

contents:
--------------------------------------------------------------------------------

Dear Sir/Madam,

we have logged your IP-address on more than 30 illegal Websites.

Important:
Please answer our questions!
The list of questions are attached.


Yours faithfully,
Steven Allison



+ + + + Central Intelligence Agency -CIA-
+ + + + Office of Public Affairs
+ + + + Washington, D.C. 20505

+ + + + phone: (703) 482-0623
+ + + + 7:00 a.m. to 5:00 p.m., US Eastern time


--------------------------------------------------------------------------------

question_list.zip

if you click the question.zip the antivirus says:Win32: Sober-AB2 [Wrm]

[Augix]

here you have a list and variations

http://rhenningjr.tripod.com/howthewestwaswon/

[Pugsley]

so wait... they know when the virus is going to hit? so then why cant they stop it before it does? or hell if they know when dont they know WHO and WHERE?

[Redmeda]

I have a friend that has the Sober Virus at the moment and he couldn't get online for awhile and now he can but, he can not use anything like MSN and other Online Programs.

Poor Guy.

[TruckStuff]

Originally posted by Pugsley
so wait... they know when the virus is going to hit? so then why cant they stop it before it does? or hell if they know when dont they know WHO and WHERE?

From the article:

"This is not like we have the corner on the market in knowing about dates and how Sober works," Durham said. "The reason you do an announcement is that this is a user-interaction worm. If people realize that there is going to be a large-scale e-mail worm spread on or around those dates and they know what to be prepared for, you can help mitigate that worm."

[Pugsley]

AH.. ok i figured that was the only reason. man people... whats so hard about not opening attachments.