The Santy worm mutates

Grok Headline matches for The Santy worm mutates

Re: New Santy-Worm attacks *all*
PHP-skripts ( Santy.c ? )

Re: New Santy-Worm attacks *all*
PHP-skripts ( Santy.c ? ) 12/25/2004 05:08 PM
K-OTiK Security (Dec 25 2004)

Anti-Santy worm on the prowl

Anti-Santy worm on the prowl 12/31/2004 12:32 PM
ZDNet Dec 31 2004 5:10PM GMT

New Santy Worm Threatens More Sites

New Santy Worm Threatens More Sites 12/27/2004 03:53 PM
Techzonez Dec 27 2004 7:52PM GMT

Google smacks down Santy worm

Google smacks down Santy worm 12/24/2004 12:27 PM
Google said it was blocking searches generated by a new worm, Santy.A, which were being used to find and infect vulnerable computers on the Internet.

Santy worm now targets Yahoo and AOL

Santy worm now targets Yahoo and AOL 12/28/2004 09:28 PM
Pravda Dec 29 2004 1:50AM GMT

New worm, Santy.A, using Google to
spread

New worm, Santy.A, using Google to
spread 12/22/2004 12:58 AM
Antivirus companies are warning Internet users of a new, fast-spreading worm that uses the Google search engine to infect Web servers running a popular package of online bulletin board software.

Santy Worm Varients Spreading

Santy Worm Varients Spreading 12/28/2004 07:14 PM
As we reported last week, Google had been used by the "Santy.A" worm to infect websites using vulnerable versions of phpBB. Google has since disallowed such search attempts by the worm, by simply not listing vulnerable sites in their search results.

Variants are now attempting to exploit search engines offered by Yahoo and AOL, targeting sites running versions of phpBB prior to version 2.0.11. Some variants of the worm damage sites using poorly coded php instances of include() and require(). AOL claims that they are now unaffected, but Yahoo has yet to comment on their security status.

Santy deletes content from effected php-based sites, and replaces it with information found within the worm itself. Luckily this worm is not communicable to computers who visit effected sites. Sites using older versions of phpBB should update immediately, and some sites utilizing php may have to be rewritten all together.

View: Google's Response @ F-Secure Virus Lab Blog

Read full story...

Santy Worm Hits AOL, Yahoo

Santy Worm Hits AOL, Yahoo 12/28/2004 12:49 PM
Enterprise Security Today Dec 28 2004 4:49PM GMT

Santy worm Targets AOL Yahoo

Santy worm Targets AOL Yahoo 12/28/2004 11:11 PM
WebProNews Dec 29 2004 3:43AM GMT

Santy Worm Defaces Web Forums

Santy Worm Defaces Web Forums 12/22/2004 01:35 AM
The Internet worm is squirming through Web servers that are running unpatched versions of the popular phpBB Web forum software. Santy uses Google search to randomly find sites running phpBB and then overwrites files.

New Santy-Worm attacks *all* PHP-skripts

New Santy-Worm attacks *all* PHP-skripts 12/25/2004 05:09 PM
Juergen Schmidt (Dec 25 2004)

Google blocks Web worm Santy.A

Google blocks Web worm Santy.A 12/29/2004 08:44 PM
The Hindu Business Line Dec 30 2004 12:40AM GMT

Google squashes Santy worm

Google squashes Santy worm 12/22/2004 01:41 AM
Search firm shuts off ability of worm--which searched for victims via Google--to replicate.

Anti-Santy worm spreads

Anti-Santy worm spreads 12/31/2004 09:02 AM
ZDNet UK Dec 31 2004 1:20PM GMT

New worm, Santy, using Google to spread

New worm, Santy, using Google to spread 12/22/2004 01:52 AM
Antivirus companies are warning Internet users about a fast-spreading new worm that infects Web servers running a popular package of online bulletin board software, and uses the Google search engine to find vulnerable servers to infect.

BBC: Santy Worm Makes Unwelcome Visit

BBC: Santy Worm Makes Unwelcome Visit 12/24/2004 01:04 PM
"Thousands of website bulletin boards have been defaced by a virus that used Google to spread across the net..."

Santy worm defaces thousands of sites

Santy worm defaces thousands of sites 12/22/2004 01:07 AM

Google stops spread of Santy worm

Google stops spread of Santy worm 12/24/2004 12:36 PM

Google Becomes Unwitting Abettor for
Santy Worm

Google Becomes Unwitting Abettor for
Santy Worm 12/22/2004 01:44 AM

The new Santy worm uses the Google search engine to find vulnerable websites and then defaces the sites' bulletin boards. The worm, formally named Net-Worm.Perl.Santy, attacks website bulletin boards (Internet forums or message centers) running versions of the popular phpBB bulletin board application. The worm exploits a known security vulnerability in early releases of the phpBB application, defacing the contents of the bulletin board.

Santy PHP Worm Variant With 50 Exploits
Discovered

Santy PHP Worm Variant With 50 Exploits
Discovered 01/02/2005 02:05 PM

Other News: Santy worm takes new tack

Other News: Santy worm takes new tack 12/28/2004 03:33 AM
The Santy worm, which originally used Google searches to locate vulnerable phpBB installations, has now mutated to use AOL and Yahoo instead.

Anti-Santy Worm Patches phpBB Flaw

Anti-Santy Worm Patches phpBB Flaw 12/31/2004 12:08 PM

Google Nukes Santy Worm, But Threat
Remains

Google Nukes Santy Worm, But Threat
Remains 12/24/2004 12:17 PM
Extreme Tech Dec 24 2004 3:33PM GMT

Net-Worm.Perl.Santy.a threatens Internet
forums

Net-Worm.Perl.Santy.a threatens Internet
forums 12/22/2004 01:17 AM

Google Nukes Santy Worm, But Search
Threat Remains

Google Nukes Santy Worm, But Search
Threat Remains 12/26/2004 10:35 PM
eWeek Dec 27 2004 1:21AM GMT

Santy.E worm poses threat to sites badly
coded in PHP

Santy.E worm poses threat to sites badly
coded in PHP 12/27/2004 11:15 AM
The latest version of the Santy worm poses an elevated risk to many Web sites built using the PHP scripting language, and protection of those sites may involve individually recoding them, security experts warned over the weekend.

Santy variants target AOL and Yahoo
Computer worm uses searches to spread

Santy variants target AOL and Yahoo
Computer worm uses searches to spread 12/28/2004 07:25 AM
San Francisco Chronicle Dec 28 2004 11:41AM GMT

SmartFone Mutates, Form of: SlashPhone

SmartFone Mutates, Form of: SlashPhone 04/27/2004 02:42 PM
Our friends at SmartFone.net asked us to pass along word that they've rebranded themselves as SlashPhone.com, which may imply that they've moved over to a Slashdot-style posting format, but no, they just think slashes are pretty cool. It is certainly easier to remember. Go give them a first day look...

Santy and SSL

Santy and SSL 01/06/2005 07:44 PM
Ofer Shezaf (Jan 06 2005)

Santy blues

Santy blues 12/22/2004 01:57 AM
CNET Asia Dec 22 2004 6:19AM GMT

New Santy Mutant Offers 'Help'

New Santy Mutant Offers 'Help' 12/31/2004 04:27 PM
Anti-Santy-Worm V4 attempts to patch vulnerable Web forum software but might cause denial-of-service attacks.

New Santy Variants Spread Beyond Google

New Santy Variants Spread Beyond Google 12/28/2004 11:11 PM
Computer Reseller News Dec 29 2004 2:23AM GMT

Santy variants target AOL and Yahoo

Santy variants target AOL and Yahoo 12/28/2004 09:09 AM
San Francisco Chronicle Dec 28 2004 1:30PM GMT

Dynamically Typed: Santy/Perl.PhpInclude

Dynamically Typed: Santy/Perl.PhpInclude 12/29/2004 09:44 AM
Over on Dynamically Typed today, there's a new posting concerning the latest worm(s) that seem to be going around - Sanity/Pe rl.PhpInclude.

New Santy Mutant Offers 'Help' (Ziff
Davis)

New Santy Mutant Offers 'Help' (Ziff
Davis) 12/31/2004 04:42 PM
Ziff Davis - Anti-Santy-Worm V4 attempts to patch vulnerable Web forum software but might cause denial-of-service attacks.

Security Watch: Internet Bulletin Boards
Join The Santy Generation

Security Watch: Internet Bulletin Boards
Join The Santy Generation 12/28/2004 07:36 PM
ABCNEWS.com Dec 28 2004 10:16PM GMT

"The Worm Within"

"The Worm Within" 05/08/2004 09:06 AM

Outwitting the worm

Outwitting the worm 01/28/2004 07:18 AM
Chicago Tribune Jan 28 2004 11:33AM GMT

A worm in the head

A worm in the head 01/03/2005 02:39 PM
Ballad is the story of a nervous and confused little homunculus. It's an unsettling webcomic with moody artwork and fantastic pacing that creeps along slowly, like a severed hand across the floor.
Grok Description matches for The Santy worm mutates
GrokA matches for The Santy worm mutates

The Santy worm mutates

The following phrases have been identified by the grok system as matching this entry: