NEWS FROM THE LAB - Tuesday, December 21, 2004

New internet worm Santy spreading! Posted by Mikko @ 15:12 GMT

New worm Santy has started spreading. This one is infected only web servers, not end user computers. In fact, it infects sites running the popular phpBB discussion forum software.

Many sites are already affected...the end result typically looks like this:


We detect this worm as "Santy.A" with updates that are going out right now.