Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Sasser Infection Plateaus, Drops

As predicted a day before, security analysts on Wednesday watched the Sasser worm attack level off.
"Sasser has plateaued," said Alfred Huger, the senior director of engineering with Symantec's response team. On Tuesday, Huger predicted that the worm's growth curve would soon begin to flatten.

"Yesterday, we were seeing about 150 Sasser submissions an hour from customers," Huger said. "This morning we're seeing around 80 an hour. The worm peaked late yesterday afternoon or early evening."

Although Symantec's DeepSight Threat network, a system of sensors and servers it uses to monitor developing exploits, now indicates about 140,000 infected systems -- an increase from the 100,000 of Tuesday -- Huger said that was additional proof that the Sasser crisis has, for now at least, passed.

Jimmy Kuo, a research fellow with security firm McAfee, confirmed the decline in Sasser. "It's leveled off, and is now dropping," he said.

While McAfee spotted 12,000 newly-infected PCs owned by its customers two days ago, that number dropped to 9,000 Tuesday.

  • 1