New version of Sasser

Found on The Register on Sunday, 09 May 2004
Browse Internet

The appearance of a new version of the infamous Sasser worm shortly after the arrest of its admitted author has fuelled speculation that its creator worked with other virus writers.

Sasser-E was first spotted three hours and 45 minutes after the arrest of Sven Jaschan, 18, from Rotenburg in northern Germany at 2pm on Friday afternoon (local time). Either earlier sightings of the fast-spreading worm were missed or Sasser-E was released by someone other than Jaschan, who was released from police custody after the new version of the worm arrived onto the scene.

Sasser-E uses the same Windows vulnerability as previous versions to spread across vulnerable Windows 2000 and XP machines, causing them to become unstable and shutdown. Unlike previous version, Sasser-E gives a warning from the "SkyNet Team" about the vulnerability it exploits. Unlike the first four Sassers but like many NetSky variants, Sasser-E tries to remove the Bagle worm.

Why does everybody blame one single guy? Or the scene in general? The media makes it look like it's only their fault. If you take a look at real-life, you will notice that eg. insurances won't pay if you left your car or house open. They all try to find a way to blame you for inviting the thief. But many home-users (and even companies) still don't pay much attention to security.