New Windows worm spreading ‘hard and fast’ worldwide; Macintosh unaffected

“A new Internet worm that spread through Asia, Australia and Europe on Monday is expected to take hold in the United States on Tuesday as people go back to work after the Martin Luther King Jr. holiday. The ‘Bagle’ or ‘Beagle’ worm arrives as an attachment to an e-mail with the subject line ‘Hi’ and ‘test : )’ in the body text. The worm is activated when a user clicks on the attached file,” Brian Krebs reports for The Washington Post.

“Once the attachment is opened, the worm tries to send copies of itself to all of the e-mail addresses that it finds on the victim’s computer, faking the return address with one randomly generated from those sifted from the infected PC. It also installs a program that lets attackers connect to infected machines, install malicious software or steal files,” Krebs reports. “The worm probably is the precursor to more evolved versions that could wreak havoc with small business and home Internet users, computer security experts said.”

“Carey Nachenberg, chief architect of Symantec Research Labs in Cupertino, Calif., said he expects the worm to continue its rapid spread as more Americans begin sorting through the e-mail that piled up in their in-boxes following the three-day weekend,” Krebs reports. ‘This is coming on hard and fast, and that’s usually a bad sign going into a shortened work week,’ Nachenberg said. Bagle has spread to computers in more than 100 countries, according to MessageLabs, an e-mail security company in New York City.”

Macintosh users are unaffected.

Full article here.

26 Comments

  1. This is getting serious. Sooner or later someone is going to do something truly malicious (financial, medical, safety related) and then the Windows apologists won’t be able to make excuses. MS is going to get major-league sued to the point of bankruptcy and some of its officers are going to be charged with willful negligence. MS has to be scared silly about this; they can’t be that dumb.

  2. I love surfing on my Mac. I can go visit all sorts of malicious web sites using Safari and guess what happens? I can actually see the content. No pop-up Windows, no viruses downloaded, and I can even see the meat that Windows-users can’t get to.

    Now if I could just figure out how to save an attachment from Outlook in Winblows.

  3. Oh great, can’t wait to go to work tomorrow. Oh wait, it won’t affect me, but it’ll be kinda fun watching all the IT geeks running around trying to keep up with this thing. They want job security, well, I guess they got it. Question is, who really wants THAT job?

  4. You guys love Mac’s?

    Well support our team, we are close to taking the 26th spot away from Silent PC Review on the Folding@home stats!

    Come beat some PC ass!!!

    What is this? We are a Team of Mac OS X folks who are running Folding@home by the Stanford University. Team Mac OS X #1971.

    It’s a program that runs in the background and helps cure Cancer and many diseases by studying protein folding. Doesn’t interfere with your usage one bit.

    Many Teams are competing and we are representing our beloved Mac’s and Mac OS X, so come join the competition.

    We especially need the power of G5’s running two or more console versions, but every processor counts in this game against the Wintel crowd. Screensaver, graphical (easy) and no-nonsense console versions available.

    We have signed up over 50 processors in the last two weeks!

    So come join us and start Folding today!

    http://teammacosx.homeunix.com/

    http://www.stanford.edu/group/pandegroup/folding/

    Ask in our forums how to run 2 console versions on Dual G4 and G5’s for twice the output!

  5. I got three emails today from my University….all said “testing” and all had an .exe file attached.
    Stupid windows.
    They killed all of those Mad Cow calves because they though they had the disease…..why can’t they do the same to PCs!

  6. “Sooner or later someone is going to do something truly malicious […]. MS is going to get major-league sued to the point of bankruptcy and some of its officers are going to be charged with willful negligence. MS has to be scared silly about this; they can’t be that dumb.”

    It could happen, but the BSA would fight it tooth and nail.

    Almost all software comes with a license that basically says, “You’re on your own.” Some bug causes your multi-million dollar proposal to be eaten? Too bad. You can’t sue the company that makes the software because, by using the software, you agreed with the license.

    I vaguely remember a lawsuit against Lotus many hundreds of years ago concerning a bug in 1-2-3 which caused some company’s calculations to go awry. They tried to sue Lotus and the courts found in Lotus’ favor.

    The BSA (Business Software Alliance) would fight it tooth and nail because companies don’t want that responsibility. Can you imagine Apple being sued whenever iMovie crashed?

  7. This is why the company I work for has to update our virus software everyday! But hey, it’s only �20 x 17 a year for the software and at least 15 mins a day to update all the pcs as some of the users are too dumb to know how to use auto update, then the monthly critical updates… it’s fun working with windows, and so much cheaper than using macs… so I’m told!

  8. Trouble always comes in threes.

    As well as this bug there’s a couple more going round in emails that purport to be from Microsoft and saying that they contain the latest security updates. The text of the mails makes a great deal about how they are part of the company’s recently announced commitment to improving security. I bet there’s a whole bunch of innocent Windows users who get taken in by them.

  9. Hooray!! More network congestion caused by shoddy MS products being insecure. Not only does it keep me in work, but a few more people will finally have had enough of Windows, and look for an alternative.

  10. I think we Mac users are lucky that the hackers writing these worms and viruses have ignored our platform of choice. Suppose one were written for the Mac and came in as an email attachment. Once it ran, could it not obtain administrator privileges, or even root access, and wreak havoc just as much as it would on a Windows machine? If anyone is willing to answer this question, I’d appreciate as accurate an answer as possible, because I want to be able to explain this to others.

  11. beryllium, a program can’t gain root or admin access on a UNIX system unless it is given permission by root or an admin user. So the user at the console would have to actually type in an admin or root password to allow the program to install itself and execute. This isn’t a Mac thing, it’s common across all UNIX and Linux flavours (Lindows excepted).

  12. See that. Another piece of software that will run on Windows and not on Mac. I wonder if that is counted when our Windows using friends say, “Well, I have software that won’t run on a Mac.”

  13. Sure, it could happen, but there are not swiss cheese holes in Panther like there are in Win$in because Apple cared enough to do things right the first time from the ground up with OSX.

  14. beryllium,
    What Dave said. I just want to add that it is theoretically possible to have a virus but it will infect only the account owner leaving other users and the system intact. It is possible to gain priviledge escalation, but it is extremely difficult, not something a script kiddie can do. Why write a very difficult virus to do minimal damage when there is another platform that looks like a swiss cheese? For the years Mac OS X has been around, there is zero virus for it. Minority status notwithstanding (that is another debate), which one is more probable: nobody (no a single hacker on the face of the earth) has ever tried to write one or that whoever tried failed?

    I also want to add to Dave’s comment: not all users know root/admin password, so, even if they want/get duped to run it as root/admin, they can’t.

Reader Feedback (You DO NOT need to log in to comment. If not logged in, just provide any name you choose and an email address after typing your comment below)

This site uses Akismet to reduce spam. Learn how your comment data is processed.