NEWS FROM THE LAB - Sunday, May 9, 2004

After the arrest, a new variant of Sasser found Posted by Mikko @ 04:49 GMT

New variant of Sasser has been found, even after the author has been apprehended. The first known case of Sasser.E was reported roughly 10 hours after the arrest.

We believe Mr. "SJ" (who has confessed to writing all the Sasser and Netsky variants) had distributed this version shortly before his arrest. He has been released on bail, but this was only after first reports of this new variant were in.

The E variant does not appear to be hack done by someone else. For one, it tries to remove the Bagle worm, unlike earlier Sassers but just like many Netsky variants.