Windows Sasser worm mutates, knocks out banks, EC; Macintosh unaffected

Security experts are analyzing the worm to determine where Windows worm Sasser might hit next.

“‘We don’t know yet, for example, if it attacks machines running on Windows XP Embedded, which runs ATM machines and cash registers. That would be disastrous for banks and retailers,’ said Raimund Genes, European president of security software firm Trend Micro,” Bernhard Warner reports for Reuters.

“In the space of three days, four variants have emerged, each capable of causing machines that run on Microsoft’s Windows operating systems XP, NT and 2000 to reboot without warning and knocking out some computer reservation systems. Victims include Goldman Sachs, Australia’s Westpac Bank and Finnish financial company Sampo. It has also hit about 300,000 computers at Germany’s Deutsche Post,” Warner reports.

“Staff were temporarily unable to issue cash over the counter as a result, German media reported, while a European Commission spokesman said Sasser hit 1,200 PCs Monday. ‘We had big problems yesterday,’ the EC spokesman said,” Warner reports. Full article here.

BBC News reports, “Taiwan’s national post office said 1,600 of its machines were hit by the virus which forced more than 400 of its 1200 branch offices to revert to pen and paper. The disruption left customers queuing in long lines at many of the company’s offices, according to television reports. Two Hong Kong government departments and some hospitals on the island were hit by the virus. In Australia Railcorp trains were halted apparently because a virus disrupted the radio systems and stopped drivers talking to signalmen. Also in Australia Westpac Bank staff were forced to use manual methods to record transactions as the virus made computers unusable. Two other banks reported infections. Finnish bancassurer Sampo said it had temporarily closed all its 130 branch offices as a precaution against Sasser. US airline Delta would not comment on reports that the virus caused disruption to its schedule.”

MacDailyNews Take: Computers running Apple’s Mac OS X are not affected by the Sasser worm. More information about how easy it is to add a Mac OS X machine to your computing arsenal here.

54 Comments

  1. hmm.. maybe someone should tell these big companies that the Mac and OS X is unaffected. Also, they hsould ask how much money they lose/spend dealing with Microsoft security related issues compared with the cost of moving to Linux/Mac. To be honest most big companies have already looked at the cost of moving to Linux – it’s just software/OS rather than new hardware as well. But the same companies who realise it’s cheap to change over but the desktop software isn’t mature enough. I think if they’re prepared to look at Linux, they should be prepared to look at OS X as well – even though it’s a more expensive proposition to change over the hardware as well, the support costs should be much less in the long run.

  2. I think businesses wouldn’t take either the eMac or iMac seriously based on their looks. We all know these are excellent computers and fine for most companies using email, web, Word and Excel. Apple needs some sort of base tower to see to businesses.

  3. i’m not sure that it would be a good idea for apple to go large, since you never know how apple will be when people start writing large amounts of viruses for it, microsofts had this problem for years apple didn’t, so it’s hard to say if apple would be virus free or secure.

  4. artiom,

    FACT: Windows is insecure because it is poorly designed
    FACT: OS X is secure because it is built on UNIX, a well designed, secure OS

    Example: Volvo or Lada? Same thing but very different. They’re both cars, but the Lada is a death trap, the Volvo is a tank.

    Windows is the Lada, OS X is the Volvo!

  5. I absolutely agree with twelveightyone and Xirt… one thing that would really be a market push for Apple is “IT insurance”; imagine if insurers sold coverage to compensate industry for the any losses due to software bugs/viruses/worms etc. The premiums for M$ customers would be enormous compared with OS X.

    In the short run companies would be covered against the “M$ Tax”, but in the long run they’d finally see the light and realize the cost savings to switching to alternatives.

  6. I went to pick up a package at Airborne Express yesterday and was told that their computers were out and they were using pen and paper.

    With Windows, you never know when you’ll be transported back to the 1970’s.

  7. Artiom: Despite twelveeightyone’s stupid analogy (windows is more secure than a lada) It is true that OSX is more secure thanks to the design of UNIX…which has been around for over 20 years.

    It’s open architecture allows you to see that, and also every program has to have permission to run, including potential viruses. Thought there may be a virus in OSX’s future, it couldn’t do much damage.

  8. But dony u think that the more popular apple is the more viruses there will be since there are planty of bright people out in the world without a job that dont have anything better to do then to wrire viruses? People that can program in the machine language, will be able o do anything at all, including hackin windows, apple or linux.

  9. artiom,

    Most hackers deliberately target Windows because it is Microsoft and because it is easy. Granted, if OS X became more popular people might try to create viruses for it, but most hackers use and like UNIX and it’d be like shitting in your own back yard, so to speak.

    UNIX has been around for ages and has had most of its holes closed and locked down. It’d be very, very hard to get a virus that could do serious damage to a machine, but maybe a bit easier to create a virus for OS X that could damage a Users account.

    Shabaz, my analogy is light-hearted ” width=”19″ height=”19″ alt=”grin” style=”border:0;” /> but it’s true.

  10. Artiom,

    Even coding in machine language requires a way to get that code running, and OS X won’t allow that. You can’t just write a program that lands on your machine and executes itself. It still has to execute in the confines of your operating system.

    I am sure that many have tried to create a virus for Mac OS X. Some may have even succeeded in creating something that will wreak havoc on your machine if you allow it. The thing is that it needs permission to run. Not just a simple “OK”, but an actual entering of an Admin password. And while I’m sure that there are people out there that would enter their Admin password when something from an attachment asks them to, most probably wouldn’t.

  11. OK all of them are good points.
    What about that serice pack 2 for xp and comin uo longhorn, are they going to be more secure or they will have as many problems as xp or even more?
    Would it be possible to say that through trial and improvement windows will be secure or people will always be hacking it?

  12. If a badly written worm can infect that many computers, what will happen when a well written worm designed for destruction of computers spreads? Undoubtedly, some people will point out stories that they are not infected, thus, however much destruction this worm costs has no bearing on their pocket. Maybe that is the case, but any company will be wise to consider the potential high costs of worms/viruses can inflict and the high cost to hire people to maintain the integrity of their network security. Above all, the cost may not be monetary, e.g. trust. If a bank goes down because of a worm, will the customers trust it to put theirm money in there? Also, for most non-technical people, security problems may cost something other than money, directly. Some may lose unsaved work, some may lose private info, etc.. While the true TCO is known after the computer purchase and maintenance, an undoubtedly varies from instances to instances, it is wise to consider potential costs and damages and the potential advantages when choosing a platform

  13. Service Pack 2 will be as effective as Patch 237456328, Patch 3365452c, Patch 339856hhdv.a and Critical Security Update 2212548754 – USELESS!

    You can’t build a house on quicksand.

    As for Longhorn, I think it will go the way of OS/2.

  14. artiom: you may download Windows virus kits off the web. Only requirement is often just having a basic understanding of the english language. An average 13 years old can launch a virus on the wild.

    To write a virus for BSDUnix requires so much deep knowledge that I do not see possible for such a guru Unix professional to be unemployed or have anything to prove by writing a virus for the platform.

    In addition to that, I have a little analogy as well: cracking into Windows requires the skill of petty thieves who operate with a brik to do smash&grab; kind of theft. Even if they know – and they do know – where to find the main branch of the Bank they do not have the skills to break into those (which are not anyway 100% sure but way above their skills). Hence they stick with what they know: smash (Windows) and grab what the can. Pun intended.

  15. When will a virus be made available for MacOSX? I want to see how OS X handles the infection and how easy it’ll be to get rid of the bug.

    MS is a very very sick OS, all these antibiotics (fixes & patches) are going to kill it in the long run. You just can’t cure someone �chronically� ill with antibiotics. Don’t fool yourself.

  16. And if one ask “what are those Unix gurus doing” the answer is easy. They are for the most involved into OpenSource activities and are the primary sources of Security Patches of Unix tools which – if you pay attention – are essentially all that you find on *Apple* security updates: they are nothing more than security updates to Unix OpenSource tools.

  17. Interesting would it be a good idea for apple to release the actual operating system so that dell, hp, ibm could sell it with their computers. Maybe apple will loose money on the actal hardwear but they would probably make more by selling it to othe computer companies.

  18. Boeing777: I am not adamant that OS X will not see a virus ever, I am pretty sure that day will come as it has come in Linux but there is one BIG difference with Windows.

    Windows OS installation are the copy-cat of all others. A Windows PC in the US is configured as one in Taiwan or in UK or in Italy. That is the reason why you see worldwide spread so easily. Smash one Windows and you are certain all other Windows will break with the same brick.

    Now, a typical Unix platform is NOT the copycat of the next one. Same for OS X. Does the user have Unix tools installed? is using postfix, sendmail, ssh, apache, etc.

    Breacking into one does not ensure world-wide spread. If tomorrow one comes and find an exploit on uuid who tells you the guy next door has that running or even installed. Does the grandma on her OS X vanilla installation cares if a crack on postfix allows the virus to send itself around? Nope, she does not even knom it exist or how to enable it.

    If you do not get world-wide spread as in Windows it is not a virus, it is a joke, at most a nuisance for the small percentage of platform that happend to be configured so that the exploit is truly exploitable.

  19. artiom: Darwin (the bulk and guts of OS X) is OpenSource. Anyone can dowload it. So much so for the security by obscurity. It is available to anyone who likes to see the source code and yet in three years no one came out with a virus (mainly for the reasons I outlined above)

  20. mind, although Darwin is OpenSource, OS X is not. Apple will not release OS X for x86 in that it would lose market share.

    Apple has 100% market share: if you want to run OS X or Apple apps you have to buy a Mac. Not so if OS X could run on a $400 PC. THEN, market share would matter for Apple and its ~5% or less would really hurt. As it is now they are only so affected by that. For as long as they have developers for OS X – and they grow in number with time – they can laugh at all analysts whining their market share is declining so Apple will die soon. They laugh because their market share is actually 100% and firmly so.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.