Sasser Worm Spreads Automatically Through Windows Hole
Experts, who say the worm has the potential to spread far and fast, have assigned an elevated threat level to it.A new worm has been detected by the virus research community that spreads through the LSASS vulnerability in various versions of Windows. Researchers and security companies are alarmed and have assigned an elevated threat level to the wormnamed Sasser.Aeven though it has not yet spread far. Unlike the Gaobot variant found several days ago that exploited the same hole in Windows, Sasser can spread and infect automatically through the hole. Gaobot is technically a "bot," meaning that it has to be manually run by the user. The vulnerability was patched weeks ago by Microsoft.
According to Ken Dunham, director of malicious code for network security intelligence firm iDefense Inc., "Sasser.A has the potential to become very widespread in a short period of time." The fact that it has not yet spread far may be due, Dunham said, to aggressive patching by users.