Comments

5 responses to “Serdar Argic Rides Again?”

1. 2005/05/16

   alecm

   Aha! – re: Serdar Argic Rides Again?

   http http://www.thestandard.com/internetnews/001293.php

   E-mail users perplexed by the barrage of German-language spam waiting in their inboxes Monday morning can point the finger of blame at the latest version of the Sober mass mailing worm which began rapidly spreading over the weekend.

   Sober.q uses both German and English-language messages to direct recipients to Web sites with right-wing German nationalistic content, according to an advisory from e-mail security company MX Logic Inc. One of the URLs (uniform resource locators) points to the Web site of the right-wing German NPD party, it said.

   The security firm said that it had seen over 125,000 instances of Sober.q overnight Saturday and into Sunday, and labelled it as a high severity threat. The variant is downloaded by computers already infected by the Sober.p worm which began circulating earlier this month, MX Logic said. The virus writers appear to have remote control over the Sober.p infected machines, giving them a network from which to launch future spam and denial of service attacks, it added.

   The latest sober variant is one of a relatively new type of “propaganda spam,” meant to spread political messages rather than sell a product or service, MX Logic said. Circulation of the worm coincides with ceremonies marking the 60th anniversary of the end of World War II in Europe and examples of subject lines it sends include “Dresden 1945” and “Du wirst zum Sklaven gemacht!!!” (“You are made slaves!!!”), according to MX Logic.

   “We are certainly seeing more propaganda spam,” said Graham Cluley, senior technology consultant with Sophos PLC. Security researchers began detecting religious spam selling a particular view of life last year, Cluley added.

   Although Sophos is seeing a lot of German-language spam sent by the new Sober variant, the worm itself doesn’t appear to be spreading anymore, Cluley said.

   E-mail users are advised to update their spam filters to guard against the new Sober spam.

   Reply
2. 2005/05/16

   alecm

   Hmmm

   Funny to be citing Gray Cluely – he once tried running off with one of my (now, ex-) girlfriends.

   In retrospect, maybe I should have let him. 8-/

   Reply
3. 2005/05/16

   Katz

   Spamalot..

   I’ve gotten a lot of spam in German in the past 24 hours; usually just a subject line and then a link. I’ve just told gmail.com it’s spam and paid no attention to its contents.

   Reply
4. 2005/05/16

   Justin Mason

   re: Serdar Argic Rides Again?

   ‘relatively new type of “propaganda spam,” meant to spread political messages rather than sell a product or service’

   duh. relatively new my ass — that’s why spam == UBE, and != UCE. anyway, SpamAssassin ruleset at http mailscanner.prolocation.net/german.cf , if you’re running that.

   that’s hilarious about Cluley btw!

   Reply
5. 2005/05/16

   alecm

   Gray Cluley

   Yeah, I really must scan some of the photos from that era… 😎

   Reply