<<<
Thursday, November 11, 2004
>>>
 
Some MyDooms renamed to Bofra Posted by Gergo @ 13:18 GMT

Even though they seem to originate from the same source code, some samples we called MyDoom earlier have been renamed to Bofra. More specifically this affects MyDoom.AG, MyDoom.AH and MyDoom.AI.

The Bofra family of worms uses a different way of propagation which we explained in this earlier post.

A link page for the Bofra family has been posted to

http://www.f-secure.com/v-descs/bofra.shtml






<<< Malware graph posters
|
Blaster variant author due to be sentenced today >>>