Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Beware Bagels Updating

A new round of Bagle worm updates are going out to already-infected PCs, a security company warned Monday, and although one site spewing out the new versions has been shut down, another has popped up.

One of the download sites monitored by PCs compromised by earlier Bagles went live Sunday, said Helsinki-based F-Secure. The site, which belongs to a Slovakian real estate firm, was sending out new editions of Bagle every 50 seconds, said F-Secure's chief research officer, Mikko Hypponen, on his company's blog.

Shortly after Hypponen's first entry, the download URL within the Slovakian site was taken offline (though the site as a whole remained online).

Ten hours later, however, the downloads resumed from a different page within a Benin news site. Hypponen said that efforts were underway to shut off the downloads from the West African country's site.

F-Secure dubbed the update as "SpamTool.Win32.Bagle.g," a variation of 2004's Bagle.g that's specifically designed to turn the compromised machine into a spam zombie, sending out junk mail to others without the computer's owner knowledge.

  • 1