WORM_GREW’s destructive payload
Based on recent reports, the number of infected computers is now up to a million. Although that’s just an approximate. We do have this kind of statistics, although it does not necessarily mean the user’s systems are infected. And for those who do not know, or forgot, we have this site: http://www.trendmicro.com/map/. Yes, it’s the Trend Micro Virus Map which ” displays information about actual virus infections detected by HouseCall, our free on-line virus scanner for PCs”. And WORM_GREW tops the chart (although not in the millions, but still).
And if you’ve read ISC’s summary, the first thing users should do is update their anti-virus signatures.
New Bagle Activity
This new Bagle activity was blogged earlier, although I should mention that these Bagle’s were discovered on some sites, which MAY indicate a future bagle seeding. Still, better to be aware than to play catch-up. And if this bagle does start seeding, we’ll be sure to get a sample and process all the necessary deliverables needed.
Although we have not heard of any infection reports, we keep receiving new JS_FEEBS samples, as evident by the “Recent Advisories” list. This is mostly in the “annoying” category. As i’ve mentioned in my previous post, new samples are continuously being forwarded to the EE team for the generic pattern creation. Hopefully this type of malware won’t become high-profile, or suddenly have lots of infection reports.