Thursday, November 11, 2004
Some MyDooms renamed to Bofra Posted by Gergo @ 13:18 GMT

Even though they seem to originate from the same source code, some samples we called MyDoom earlier have been renamed to Bofra. More specifically this affects MyDoom.AG, MyDoom.AH and MyDoom.AI.

The Bofra family of worms uses a different way of propagation which we explained in this earlier post.

A link page for the Bofra family has been posted to


<<< Malware graph posters
Blaster variant author due to be sentenced today >>>