Santy worm Targets AOL Yahoo

Grok Headline matches for Santy worm Targets AOL Yahoo

Santy worm now targets Yahoo and AOL

Santy worm now targets Yahoo and AOL 12/28/2004 09:28 PM
Pravda Dec 29 2004 1:50AM GMT

Santy Worm Hits AOL, Yahoo

Santy Worm Hits AOL, Yahoo 12/28/2004 12:49 PM
Enterprise Security Today Dec 28 2004 4:49PM GMT

Santy variants target AOL and Yahoo
Computer worm uses searches to spread

Santy variants target AOL and Yahoo
Computer worm uses searches to spread 12/28/2004 07:25 AM
San Francisco Chronicle Dec 28 2004 11:41AM GMT

Re: New Santy-Worm attacks *all*
PHP-skripts ( Santy.c ? )

Re: New Santy-Worm attacks *all*
PHP-skripts ( Santy.c ? ) 12/25/2004 05:08 PM
K-OTiK Security (Dec 25 2004)

New Google worm targets AOL, Yahoo

New Google worm targets AOL, Yahoo 12/27/2004 11:43 PM

Google worm targets AOL, Yahoo

Google worm targets AOL, Yahoo 12/27/2004 03:56 PM
Santy worm, which used Google to bring down bulletin board pages, now uses AOL and Yahoo search.

The Santy worm mutates

The Santy worm mutates 12/28/2004 05:37 PM
TechSpot Dec 28 2004 9:42PM GMT

Santy Worm Defaces Web Forums

Santy Worm Defaces Web Forums 12/22/2004 01:35 AM
The Internet worm is squirming through Web servers that are running unpatched versions of the popular phpBB Web forum software. Santy uses Google search to randomly find sites running phpBB and then overwrites files.

Google blocks Web worm Santy.A

Google blocks Web worm Santy.A 12/29/2004 08:44 PM
The Hindu Business Line Dec 30 2004 12:40AM GMT

New Santy-Worm attacks *all* PHP-skripts

New Santy-Worm attacks *all* PHP-skripts 12/25/2004 05:09 PM
Juergen Schmidt (Dec 25 2004)

Santy Worm Varients Spreading

Santy Worm Varients Spreading 12/28/2004 07:14 PM
As we reported last week, Google had been used by the "Santy.A" worm to infect websites using vulnerable versions of phpBB. Google has since disallowed such search attempts by the worm, by simply not listing vulnerable sites in their search results.

Variants are now attempting to exploit search engines offered by Yahoo and AOL, targeting sites running versions of phpBB prior to version 2.0.11. Some variants of the worm damage sites using poorly coded php instances of include() and require(). AOL claims that they are now unaffected, but Yahoo has yet to comment on their security status.

Santy deletes content from effected php-based sites, and replaces it with information found within the worm itself. Luckily this worm is not communicable to computers who visit effected sites. Sites using older versions of phpBB should update immediately, and some sites utilizing php may have to be rewritten all together.

View: Google's Response @ F-Secure Virus Lab Blog

Read full story...

New Santy Worm Threatens More Sites

New Santy Worm Threatens More Sites 12/27/2004 03:53 PM
Techzonez Dec 27 2004 7:52PM GMT

Google squashes Santy worm

Google squashes Santy worm 12/22/2004 01:41 AM
Search firm shuts off ability of worm--which searched for victims via Google--to replicate.

Google smacks down Santy worm

Google smacks down Santy worm 12/24/2004 12:27 PM
Google said it was blocking searches generated by a new worm, Santy.A, which were being used to find and infect vulnerable computers on the Internet.

New worm, Santy.A, using Google to
spread

New worm, Santy.A, using Google to
spread 12/22/2004 12:58 AM
Antivirus companies are warning Internet users of a new, fast-spreading worm that uses the Google search engine to infect Web servers running a popular package of online bulletin board software.

Anti-Santy worm on the prowl

Anti-Santy worm on the prowl 12/31/2004 12:32 PM
ZDNet Dec 31 2004 5:10PM GMT

Anti-Santy worm spreads

Anti-Santy worm spreads 12/31/2004 09:02 AM
ZDNet UK Dec 31 2004 1:20PM GMT

New worm, Santy, using Google to spread

New worm, Santy, using Google to spread 12/22/2004 01:52 AM
Antivirus companies are warning Internet users about a fast-spreading new worm that infects Web servers running a popular package of online bulletin board software, and uses the Google search engine to find vulnerable servers to infect.

BBC: Santy Worm Makes Unwelcome Visit

BBC: Santy Worm Makes Unwelcome Visit 12/24/2004 01:04 PM
"Thousands of website bulletin boards have been defaced by a virus that used Google to spread across the net..."

Santy worm defaces thousands of sites

Santy worm defaces thousands of sites 12/22/2004 01:07 AM

Google stops spread of Santy worm

Google stops spread of Santy worm 12/24/2004 12:36 PM

Santy PHP Worm Variant With 50 Exploits
Discovered

Santy PHP Worm Variant With 50 Exploits
Discovered 01/02/2005 02:05 PM

Google Becomes Unwitting Abettor for
Santy Worm

Google Becomes Unwitting Abettor for
Santy Worm 12/22/2004 01:44 AM

The new Santy worm uses the Google search engine to find vulnerable websites and then defaces the sites' bulletin boards. The worm, formally named Net-Worm.Perl.Santy, attacks website bulletin boards (Internet forums or message centers) running versions of the popular phpBB bulletin board application. The worm exploits a known security vulnerability in early releases of the phpBB application, defacing the contents of the bulletin board.

Other News: Santy worm takes new tack

Other News: Santy worm takes new tack 12/28/2004 03:33 AM
The Santy worm, which originally used Google searches to locate vulnerable phpBB installations, has now mutated to use AOL and Yahoo instead.

Net-Worm.Perl.Santy.a threatens Internet
forums

Net-Worm.Perl.Santy.a threatens Internet
forums 12/22/2004 01:17 AM

Anti-Santy Worm Patches phpBB Flaw

Anti-Santy Worm Patches phpBB Flaw 12/31/2004 12:08 PM

Google Nukes Santy Worm, But Threat
Remains

Google Nukes Santy Worm, But Threat
Remains 12/24/2004 12:17 PM
Extreme Tech Dec 24 2004 3:33PM GMT

Santy.E worm poses threat to sites badly
coded in PHP

Santy.E worm poses threat to sites badly
coded in PHP 12/27/2004 11:15 AM
The latest version of the Santy worm poses an elevated risk to many Web sites built using the PHP scripting language, and protection of those sites may involve individually recoding them, security experts warned over the weekend.

Google Nukes Santy Worm, But Search
Threat Remains

Google Nukes Santy Worm, But Search
Threat Remains 12/26/2004 10:35 PM
eWeek Dec 27 2004 1:21AM GMT

Santy variants target AOL and Yahoo

Santy variants target AOL and Yahoo 12/28/2004 09:09 AM
San Francisco Chronicle Dec 28 2004 1:30PM GMT

New worm targets two MS vulnerabilities

New worm targets two MS vulnerabilities 06/04/2004 10:34 AM
Antivirus software companies are warning customers about a new e-mail worm that targets unpatched Microsoft Corp. Windows machines with either of two recently disclosed software vulnerabilities.

New Worm Targets Old Windows Flaws

New Worm Targets Old Windows Flaws 06/04/2004 08:39 PM
The new worm, known as both "Plexus" and "Explet.A," was first detected on Wednesday and spreads by exploiting Windows machines with vulnerabilities used by two recent worms, Sasser and Blaster, according to alerts. Network Associates' McAfee Antivirus Emergency Response Team and Symantec both say the new worm does not pose a serious threat, but issued software updates to detect it.

Virulent worm targets Microsoft

Virulent worm targets Microsoft 01/28/2004 08:43 PM
BBC Jan 29 2004 0:41AM GMT

New worm targets two Microsoft
vulnerabilities

New worm targets two Microsoft
vulnerabilities 06/04/2004 05:07 PM
Security vendors said the new worm, known as either Plexus or Explet.A, doesn't pose a serious threat, but they issued software updates yesterday to detect it.

New e-mail worm targets antispammers

New e-mail worm targets antispammers 12/03/2003 02:35 PM
ZDNet Dec 3 2003 1:45PM ET

Another Worm Targets Anti-Spam Sites

Another Worm Targets Anti-Spam Sites 12/03/2003 10:59 AM
kevinvee writes "Yahoo! is reporting about the next battle of Spam Houses versus Spamhauses. This time, its W32/Mimail-L receiving the attention. "It's the ...

New 'Doomjuice' worm emerges, targets
Microsoft

New 'Doomjuice' worm emerges, targets
Microsoft 02/10/2004 05:27 PM
Deepika Global Feb 10 2004 8:54PM GMT

Jitux.A worm targets MSN Messenger users

Jitux.A worm targets MSN Messenger users 01/06/2004 06:51 AM
Computer Weekly Jan 6 2004 6:09AM ET

New worm targets Sasser code flaw

New worm targets Sasser code flaw 05/13/2004 05:11 PM
BOSTON - A new Internet worm is spreading by exploiting a flaw in the Sasser worm, according to an alert issued Thursday.
Grok Description matches for Santy worm Targets AOL Yahoo
GrokA matches for Santy worm Targets AOL Yahoo

Santy worm Targets AOL Yahoo

The following phrases have been identified by the grok system as matching this entry: