Google squashes Santy worm

Grok Headline matches for Google squashes Santy worm

New worm, Santy, using Google to spread

New worm, Santy, using Google to spread 12/22/2004 01:52 AM
Antivirus companies are warning Internet users about a fast-spreading new worm that infects Web servers running a popular package of online bulletin board software, and uses the Google search engine to find vulnerable servers to infect.

New worm, Santy.A, using Google to
spread

New worm, Santy.A, using Google to
spread 12/22/2004 12:58 AM
Antivirus companies are warning Internet users of a new, fast-spreading worm that uses the Google search engine to infect Web servers running a popular package of online bulletin board software.

Google smacks down Santy worm

Google smacks down Santy worm 12/24/2004 12:27 PM
Google said it was blocking searches generated by a new worm, Santy.A, which were being used to find and infect vulnerable computers on the Internet.

Google blocks Web worm Santy.A

Google blocks Web worm Santy.A 12/29/2004 08:44 PM
The Hindu Business Line Dec 30 2004 12:40AM GMT

Google Becomes Unwitting Abettor for
Santy Worm

Google Becomes Unwitting Abettor for
Santy Worm 12/22/2004 01:44 AM

The new Santy worm uses the Google search engine to find vulnerable websites and then defaces the sites' bulletin boards. The worm, formally named Net-Worm.Perl.Santy, attacks website bulletin boards (Internet forums or message centers) running versions of the popular phpBB bulletin board application. The worm exploits a known security vulnerability in early releases of the phpBB application, defacing the contents of the bulletin board.

Google stops spread of Santy worm

Google stops spread of Santy worm 12/24/2004 12:36 PM

Google Nukes Santy Worm, But Threat
Remains

Google Nukes Santy Worm, But Threat
Remains 12/24/2004 12:17 PM
Extreme Tech Dec 24 2004 3:33PM GMT

Google Nukes Santy Worm, But Search
Threat Remains

Google Nukes Santy Worm, But Search
Threat Remains 12/26/2004 10:35 PM
eWeek Dec 27 2004 1:21AM GMT

Re: New Santy-Worm attacks *all*
PHP-skripts ( Santy.c ? )

Re: New Santy-Worm attacks *all*
PHP-skripts ( Santy.c ? ) 12/25/2004 05:08 PM
K-OTiK Security (Dec 25 2004)

Reuters Squashes Worm, Restores IM

Reuters Squashes Worm, Restores IM 04/15/2005 08:33 PM
After a daylong suspension, Reuters puts its enterprise IM network back online, having largely thwarted the spread of a Kelvir worm variant.

The Santy worm mutates

The Santy worm mutates 12/28/2004 05:37 PM
TechSpot Dec 28 2004 9:42PM GMT

Santy Worm Varients Spreading

Santy Worm Varients Spreading 12/28/2004 07:14 PM
As we reported last week, Google had been used by the "Santy.A" worm to infect websites using vulnerable versions of phpBB. Google has since disallowed such search attempts by the worm, by simply not listing vulnerable sites in their search results.

Variants are now attempting to exploit search engines offered by Yahoo and AOL, targeting sites running versions of phpBB prior to version 2.0.11. Some variants of the worm damage sites using poorly coded php instances of include() and require(). AOL claims that they are now unaffected, but Yahoo has yet to comment on their security status.

Santy deletes content from effected php-based sites, and replaces it with information found within the worm itself. Luckily this worm is not communicable to computers who visit effected sites. Sites using older versions of phpBB should update immediately, and some sites utilizing php may have to be rewritten all together.

View: Google's Response @ F-Secure Virus Lab Blog

Read full story...

New Santy-Worm attacks *all* PHP-skripts

New Santy-Worm attacks *all* PHP-skripts 12/25/2004 05:09 PM
Juergen Schmidt (Dec 25 2004)

Santy Worm Defaces Web Forums

Santy Worm Defaces Web Forums 12/22/2004 01:35 AM
The Internet worm is squirming through Web servers that are running unpatched versions of the popular phpBB Web forum software. Santy uses Google search to randomly find sites running phpBB and then overwrites files.

Anti-Santy worm on the prowl

Anti-Santy worm on the prowl 12/31/2004 12:32 PM
ZDNet Dec 31 2004 5:10PM GMT

Santy Worm Hits AOL, Yahoo

Santy Worm Hits AOL, Yahoo 12/28/2004 12:49 PM
Enterprise Security Today Dec 28 2004 4:49PM GMT

New Santy Worm Threatens More Sites

New Santy Worm Threatens More Sites 12/27/2004 03:53 PM
Techzonez Dec 27 2004 7:52PM GMT

Anti-Santy worm spreads

Anti-Santy worm spreads 12/31/2004 09:02 AM
ZDNet UK Dec 31 2004 1:20PM GMT

Santy worm now targets Yahoo and AOL

Santy worm now targets Yahoo and AOL 12/28/2004 09:28 PM
Pravda Dec 29 2004 1:50AM GMT

Santy worm Targets AOL Yahoo

Santy worm Targets AOL Yahoo 12/28/2004 11:11 PM
WebProNews Dec 29 2004 3:43AM GMT

Other News: Santy worm takes new tack

Other News: Santy worm takes new tack 12/28/2004 03:33 AM
The Santy worm, which originally used Google searches to locate vulnerable phpBB installations, has now mutated to use AOL and Yahoo instead.

Santy PHP Worm Variant With 50 Exploits
Discovered

Santy PHP Worm Variant With 50 Exploits
Discovered 01/02/2005 02:05 PM

BBC: Santy Worm Makes Unwelcome Visit

BBC: Santy Worm Makes Unwelcome Visit 12/24/2004 01:04 PM
"Thousands of website bulletin boards have been defaced by a virus that used Google to spread across the net..."

Santy worm defaces thousands of sites

Santy worm defaces thousands of sites 12/22/2004 01:07 AM

Anti-Santy Worm Patches phpBB Flaw

Anti-Santy Worm Patches phpBB Flaw 12/31/2004 12:08 PM

Net-Worm.Perl.Santy.a threatens Internet
forums

Net-Worm.Perl.Santy.a threatens Internet
forums 12/22/2004 01:17 AM

Santy.E worm poses threat to sites badly
coded in PHP

Santy.E worm poses threat to sites badly
coded in PHP 12/27/2004 11:15 AM
The latest version of the Santy worm poses an elevated risk to many Web sites built using the PHP scripting language, and protection of those sites may involve individually recoding them, security experts warned over the weekend.

Santy variants target AOL and Yahoo
Computer worm uses searches to spread

Santy variants target AOL and Yahoo
Computer worm uses searches to spread 12/28/2004 07:25 AM
San Francisco Chronicle Dec 28 2004 11:41AM GMT

New Santy Variants Spread Beyond Google

New Santy Variants Spread Beyond Google 12/28/2004 11:11 PM
Computer Reseller News Dec 29 2004 2:23AM GMT

Cisco squashes one bug

Cisco squashes one bug 04/22/2004 03:54 AM
ZDNet UK Apr 22 2004 7:47AM GMT

Orange squashes SPV smartphone

Orange squashes SPV smartphone 06/08/2004 07:33 AM
C500 is 'World's smallest', network claims

Mozilla squashes security bugs

Mozilla squashes security bugs 09/27/2004 06:50 AM
CNET Sep 27 2004 10:08AM GMT

Rowling Squashes Ugly Storge/Icklibogg
Rumors (Reuters)

Rowling Squashes Ugly Storge/Icklibogg
Rumors (Reuters) 06/30/2004 09:25 AM
Reuters - JK Rowling has silenced the rumor-mongers by confirming the new book in her series will be called "Harry Potter and the Half Blood Prince."

Net Worm Uses Google to Spread

Net Worm Uses Google to Spread 12/22/2004 01:19 AM

New-look worm gives Google trouble

New-look worm gives Google trouble 07/26/2004 09:35 PM
news.com.au Jul 27 2004 1:47AM GMT

Net worm using Google to spread

Net worm using Google to spread 12/22/2004 01:14 AM
By Robert Lemos CNET News.com December 21, 2004, 11:01 AM PT A Web worm that identifies potential victims by searching Google is spreading among online bulletin boards using a vulnerable version of the program phpBB, security professionals said on Tuesday. The Santy worm uses a flaw in the widely used community forum software known as the PHP Bulletin Board (phpBB) to spread, according to updated analyses. The worm searches Google for sites using a vulnerable#8230; pa href=http://channels.lockergnome.com/news/archives/20041221_net_worm_u sing_google_to_spread.phtmlDirect and Related Links for 'Net worm using Google to spread'/a/p

Google worm turns to AOL and Yahoo

Google worm turns to AOL and Yahoo 12/28/2004 05:35 AM
ZDNet UK Dec 28 2004 8:02AM GMT

New Google worm targets AOL, Yahoo

New Google worm targets AOL, Yahoo 12/27/2004 11:43 PM

Google worm targets AOL, Yahoo

Google worm targets AOL, Yahoo 12/27/2004 03:56 PM
Santy worm, which used Google to bring down bulletin board pages, now uses AOL and Yahoo search.
Grok Description matches for Google squashes Santy worm
GrokA matches for Google squashes Santy worm

Google squashes Santy worm

The following phrases have been identified by the grok system as matching this entry: