New Sober steals your passwords

Latest News
Microsoft Warns of Word attack Backup Your Information! Daylight Saving Howto & Warning Storm Virus Provide Spammers New Exploited PC MarshallS/TJ Max Security Breach

Popular
Installing Skype on Ubuntu Linux MarshallS/TJ Max Security Breach Secure Hard Disk Erasing Terms and Conditions Reseting the TCP/IP stack on an MS XP with NETSH command

Novemer 15, 2005 Today

A number of new variant of the Email-Worm.Win32.Sober.z drop a spyware able to capture password from Outlook and Internet Explorer. These Sobers are pretty much the same as before a mass-mailing worm that uses its own SMTP engine to spread. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German.

What is interesting is that these Sobers also drop a spyware PSWTool.PassView.162 onto the system. As the name suggests this program is a tool which is able to show certain passwords. In this case the program can show the passwords stored by Internet Explorer and Outlook. As nor Sober nor PSWTool.PassView.162 can send out the obtained info from PassView, it is likely that the file(s) that Sober is (possibly) going to download will have this ability Under investigation