About
Subscribe

Genotyping` best against Mytob mass attack

Johannesburg, 13 Apr 2005

Experts at SophosLabs, Sophos`s global network of virus and spam analysis centres, successfully defended customers against multiple attacks by new versions of the Mytob worm this weekend, using proactive technology.

The author of the Mytob worms appears to have deliberately waited until the weekend before releasing five new versions of the worm, including W32/Mytob-X, W32/Mytob-Y, W32/Mytob-Z, W32/Mytob-AA and W32/Mytob-AB. Sophos`s proactive Genotype technology was capable of detecting all five as new versions of the Mytob worm (naming them W32/MyDoom-Gen), and defending customers` computers without requiring an update.

The Mytob worms spread via e-mail, planting a backdoor Trojan horse which can be used by remote hackers to gain access and control over a victim`s computer. The computer can then be spied on (to steal confidential information), used to send spam or launch denial-of-service attacks.

Genotype detection technology uses forensic analysis to identify suspicious patterns and characteristics that are unique to either a virus family or a spam campaign. By analysing these Genotype patterns, Sophos reduces exposure to new unidentified threats and unwanted content.

"Hundreds of new virus threats, many with a number of variants, emerge each month. Sophos`s Genotype technology helps protect businesses worldwide against new attacks - even before they have been seen by anti-virus experts," says Brett Myroff, CEO of local Sophos distributor, NetXactics.

Sophos`s Genotype technology also protected users against a new version of the MyDoom worm, W32/MyDoom-AJ, which emerged this weekend.

Share

NetXactics

NetXactics is a South African-based company, focused on the provision of security solutions. It is the sole distributor in Sub-Saharan Africa for UK-based Sophos Plc, one of the leaders in the provision of anti-virus and anti-spam software for the corporate environment. For more information, visit NetXactics at www.netxactics.co.za.

Editorial contacts

Adriaan du Plessis
Me Talk Pretty
(011) 447 3785
metalkpretty@telkomsa.net