Quantcast

New E-Mail Worm Spreads

W32.Beagle uses unsophisticated methods, but could still pose a threat.

Paul Roberts, IDG News Service

  • 0 Yes
  • 0 No

Beagle 2, the European Space Agency's Mars explorer, did not have much success with its mission of exploring the surface of the Red Planet. But a new e-mail worm with the same name is apparently having better luck exploring the Internet, according to warnings issued by leading antivirus software companies.

The new worm, known as W32.Beagle and W32.Bagle, appeared on Sunday and spreads by harvesting e-mail addresses from computer hard drives, then mailing copies of itself out to those addresses. It fakes the "from" address on e-mail messages it sends, antivirus companies say.

The worm arrives in an e-mail file attachment with a randomly generated name and EXE extension. E-mail messages containing the worm have the subject "Hi" and a message body that reads: "Test =)" followed by some randomly generated characters and then "Test, yep," says F-Secure of Helsinki.

The worm affects computers running a number of versions of Microsoft's Windows operating system including Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, and Windows XP. It is programmed to stop spreading on January 28, 2004, F-Secure says.

Still Spreading

Mass mailing worms are common and Beagle's suspicious subject line and message body should be enough to keep most users from opening the file attachment and infecting themselves. Also, many companies block e-mail messages that contain EXE file attachments, which would stop the spread of the worm, F-Secure says.

However, Beagle appears to be particularly good at harvesting e-mail addresses from its victims and then targeting those addresses with copies of itself, which may account for its spread, the company says.

Assessments of Beagle's threat vary widely. Symantec rates Beagle a Level 2 or "low" threat, meaning that the company considered Beagle "reasonably harmless and containable." F-Secure says Beagle was a "Level 1" threat on its virus radar, the highest level alert indicating a worldwide epidemic of a serious new virus such as Nimda, the company says.

  • Recommend this story?
  • 0 Yes
    0 No
 

Featured APC Accessories

  • APC Back-UPS ES Safeguards your equipment from damaging surges and spikes that travel along your utility & data lines.
  • APC SurgeArrest Performance Highest level of protection for your professional computers, electronics and connected devices, as well as provides surge protection.

People who read this also read:

  • 15 Minutes to a Secure Business Get the Secure in 15 toolkit starting with the "15 Minutes Month-at-a-Glance" calendar. McAfee will send you additional tools and tricks to stay protected around the clock.
  • A Buyer's Guide to Data Protection Implementing data protection products and processes can be daunting. Make the right decisions by exploring what is available and what makes sense for your organization. Use this simple guide to evaluate different vendor offerings.

Sponsored Links