mjc
03-15-2003, 01:46 PM
A new worm making the rounds, Bibrog-B, masquerades as a shooting game. This worm spreads through email and P2P networks, it not only infects, but steals login info for some sites.
It does this by monitoring the address in IE and substituting these dropped files: citibank.htm, hotmail.htm, msn.htm, yahoo.htm for the actual pages.
http://www.sophos.com/virusinfo/analyses/w32bibrogb.html
It does this by monitoring the address in IE and substituting these dropped files: citibank.htm, hotmail.htm, msn.htm, yahoo.htm for the actual pages.
http://www.sophos.com/virusinfo/analyses/w32bibrogb.html