Another Strike of Strats

Just a few days after we had an emergency release of OPR 3.939.00 due to the massive effect of TROJ_STRAT.GG and WORM_STRAT.GG onslaught, we have sensed another severe seeding of Trojan and Worm Strats in our honeypots. This causes Trend Micro to release an urgent Bandage pattern to protect its customers from these critters. These critters have been given the detection names TROJ_STRAT.GN and WORM_STRAT.GN.

Interestingly and annoyingly, the accessed url of both variants is on the same domain and just differs on the directory location within the domain. Nevertheless, the generic pattern for STRAT variants has also been improved and modified to pro-actively detect future variants of these bugs.