Net worm using Google to spread

[whatthe]

http://news.zdnet.com/2100-1009_22-5499725.html?tag=zdfd.newsfeed

Apparently, at this time, this only affects the boards not the users (according to Kapersky)

http://www.viruslist.com/en/alerts?alertid=156678925

The worm creates a specially formulated Google search request. This request will give a list of sites running vulnerable versions of phpBB. The worm then sends a request to all sites found, which contains an exploit for the vulnerability. When the server under attack processes the exploit, the worm penetrates the site and gains control. This process is then repeated.

http://www.viruslist.com/en/viruses/encyclopedia?virusid=68388

[Und3ertak3r]

Perl.Santy is a worm written in Perl script that attempts to spread to web servers which are vulnerable to the PHPBB Remote URLDecode Input Validation Vulnerability (BID 11672). If successful, the worm copies itself to the server and overwrites files with the following extensions:

* .asp
* .htm
* .jsp
* .php
* .phtm
* .shtm



basicly if your running a vulenerable PHPBB server.. patch it..

info found @ http://securityresponse.symantec.com/avcenter/venc/data/perl.santy.html

Happy Bah Humbug

[GArrigotti]

Isn't there a update though for it already? To help prevent it from spreading to their server?

[whatthe]

Google squashes Santy worm
http://news.zdnet.com/2100-1009_22-5500265.html?tag=zdfd.newsfeed

Apparently Google was quick to act....after being prodded.

This is another article "Google's search for security" that deals with Google's security issues.

http://news.zdnet.com/2100-1009_22-5500341.html?tag=zdfd.newsfeed

This pretty much sums up their situation. "There is a tough balance between providing information to customers and providing information that can be harmful in the hands of an attacker,"

[July]

Has anybody noticed on their webserver a lot of hits from googlebot from this? I don't have a very friendly website for search engines but over the last couple of days i've noticed googlebot hitting the website about 5 - 10 times a day. I looked at reffering urls and it's totally empty for the google hits and there isn't anything in it. Just thought I would ask seems kind of fishy .

[yourdeadin]

OFF TOPIC:
what actually is a google bot? nvr actualy saw it but heard a lot abot it?
a link would be nice

[the_JinX]

http://www.google.com/bot.html Googlebot: Google's Web Crawler

Googlebot is Google's web-crawling robot. It collects documents from the web to build a searchable index for the Google search engine. On this page, you'll find answers to the most commonly asked questions about how our web crawler works.