Sober-infected computers spew German right-wing messages

    From TechTimes, May 18th, 2005
    Sober started its latest Internet tear earlier this month by promising tickets for the 2006 World Cup in Germany. Now machines infected by the worm are becoming messengers of German nationalism. Lynnfield, Mass.-based antivirus firm Sophos said the Sober-Q Trojan horse -- dropped on machines by the Sober-N worm -- is being used to send out German spam with WW II-era references.
    Those e-mails use various subject lines including: "Dresden Bombing Is To Be Regretted Enormously," "Armenian Genocide Plagues Ankara 90 Years On," "Dresden 1945" and "Turkish Tabloid Enrages Germany with Nazi Comparisons." The Trojan drops a file onto infected PCs that includes links to online news stories about previous versions of the Sober worm and the text: "Ich bin immer noch kein Spammer! Aber sollte vielleicht einer werden :)," which translates to "I'm not a spammer, but perhaps I should become one :)."
    "Thousands of innocent computer users are unknowingly spewing out this unwanted mail as the Sober author has taken control of their PCs," Graham Cluley, Sophos' senior technology consultant, said in a statement. "By including links to news stories about previous variants of the Sober worms, it seems that the author is looking for notoriety, but it's unlikely that the thousands deluged with this spam will take kindly to his tactics. This latest piece of malware highlights the links between virus writers and spammers and reinforces the need for everyone to deploy regularly updated antivirus and antispam software as well as a firewall."

<Back to What's New>