On The Insider: Britney's Bikini-Clad Top 10
BNET Business Network:
BNET
TechRepublic
ZDNet

By Munir Kotadia
Posted on ZDNet News: Mar 3, 2004 3:09:00 PM

Security researchers have discovered that the authors of MyDoom and Bagle are exchanging insults with the author of Netsky using text that is hidden inside the virus's code.

Since Friday, more than 10 variants of the Netsky, Bagle and MyDoom worms have been discovered. Mutants spreading in the past 24 hours have contained messages that indicate the authors of MyDoom and Bagle have teamed up against Netsky's author, antivirus experts said.

Finnish security company F-Secure on Tuesday reported that Bagle.J contained a line of text that said: "Hey, NetSky, f*ck off you b*tch, don't ruine our bussiness, wanna start a war?"

Mydoom.G, which was released on the same day, also contained a message to Netsky's author: "to netsky's creator(s): imho, skynet is a decentralized peer-to-peer neural network. we have seen P2P in Slapper in Sinit only. they may be called skynets, but not your shitty app."

In response, the latest Netsky variant (F), which was discovered on Wednesday morning, contained the message: "Skynet AntiVirus - Bagle - you are a looser!!!!".

Graham Cluley, senior technology consultant for antivirus company Sophos, told ZDNet UK he believes the insults are flying because the authors of Bagle and MyDoom are not happy that Netsky has received so much publicity. "The author of Bagle is rather upset that the Netsky guy is taking all the headlines and getting most of the attention," he said. "Like any community, the virus writers often are at war with each other--rather like politicians--but their war of words is taking place on users' desktops and users' e-mail systems."

To get their messages across, the worm writers are constantly changing their code to ensure they keep one step ahead of the antivirus companies.

"They are just tweaking them just enough--and getting a big kick out of seeing the antivirus companies reacting and posting information on their sites," said Cluley. "We are the ones that are all suffering. I would much rather they ranted at each other on message boards instead of in raw code."

This isn't the first time worm authors have included a message in their malware. For example, the MSBlast worm, which caused so much damage last summer, contained a message directed at Microsoft chairman Bill Gates: "I just want to say LOVE YOU SAN!! billy gates why do you make this possible ? Stop making money and fix your software!!"

SponsoredWhite Papers, Webcasts, and Downloads

  • Talkback
  • Most Recent of 15 Talkback(s)
Well, you're part of the problem
if your laughing at the situation. Condoning it cause you hate lil Big Brother MS doesn't mean they'd treat you any better where ever you're at or whatever you're on. If its bragging rights they want, maybe they'll stop going for sheer numbers and try cracking the hardest nuts.... (Read the rest)
Posted by: FilledOut Posted on: 03/06/04 You are currently: a Guest | | Terms of Use
I have a few things I'd like to say to the authors too  SublimeDaze | 03/03/04
hehe  engel000 | 03/05/04
Slow news day, huh?  ejhonda | 03/03/04
BTW  CobraA1 | 03/03/04
But what about....  tic swayback | 03/03/04
True  CobraA1 | 03/03/04
Has it occured to you...  DragonBRockin | 03/03/04
what?  lifeiseasy | 03/04/04
Has it occured to you.....  middle of nowhere | 03/04/04
What about it?  Oggie_z | 03/04/04
i thought they were russian  hipparchus | 03/03/04
Good Link  JoeMama_z | 03/03/04
sounds good  lifeiseasy | 03/04/04
Its gratifying to see.......  nite_w0lf | 03/03/04
Well, you're part of the problem  FilledOut | 03/06/04

What do you think?

advertisement
advertisement

White Papers, Webcasts, and Downloads

SmartPlanet

Click Here