<<<
NEWS FROM THE LAB - Sunday, December 26, 2004
>>>
 

 
Phpishing issues Posted by Mikko @ 08:51 GMT

Santy source code snippet
We're now detecting the various PHP-related malware found over the last days as variants of these families:

 Net-Worm.Perl.Santy
Backdoor.Perl.Shellbot
Backdoor.Perl.Termapp
Backdoor.Perl.Nois


They all target PHP or phpBB vulnerabilities.

Some of them try to search for targets using AOL and Yahoo search engines. As far as we can see, the AOL searches will fail but Yahoo searches are working. So we're once again trying to contact search engine administrations to get them to block malicious searches.