SV: Ruh-Roh SOBIG.G?
From: Peter Kruse (kruse_at_krusesecurity.dk)
To: "'Liviu Daia'" <Liviu.Daia@imar.ro>, <email@example.com> Date: Fri, 26 Sep 2003 00:02:24 +0200
There is no new Sobig worm here. I just ran through samples received by
the original poster and I can confirm that these are all Sobig-F
samples. The worm is known to be polymorphic which by nature will change
the size and content of the code. Nothing new here.
Kind regards // Med venlig hilsen
CSIS / Kruse Security ApS