Trinity Security warns industry as Netsky.B becomes more critical than MyDoom

Trinity Security Services issued a warning to businesses after a variant of the NetSky worm called NetSky.b became more dangerous than MyDoom. E-mail inboxes are being swamped as Netsky.B continues to increase its infection rate. In the last 24 hours, MessageLabs has stopped more than 10 times as many Netsky.B worms as the recent MyDoom worms. Symantec have rated the worm as severe meaning the worm is a dangerous threat and is difficult to contain.

The worm appears in the Inbox using a spoofed "from" address and a subject line chosen from one of the following: hi, hello, read it immediately, something for you, warning, information, stolen, fake, unknown.

Simon Jenner, Principle Security Consultant at Trinity warned that messages carrying NetSky.b come with almost 50 different subject lines and body text, from "I have your password!" to the succinct "OK." making it difficult to identify and stop. 'It carries a file attachment with a
double extension, which can arrive in a variety of formats, including a ZIP archive. The body of the e-mail contains a variety of messages, and the attachment will normally have a double-file name or be a zip file. When the file is opened it displays a message "The file could not be
opened!" before going to work. Netsky.B scans the hard drives and shared drives of an infected computer for e-mail addresses and then uses its own SMTP engine to mail itself to those addresses.

Trinity Security Services offer a range of services to help an organisation maximise protection of its information assets against worms such as Netsky.B. Further information on our services can be found on www.trinitysecurity.com or by e-mailing us at info@trinitysecurity.com

About Trinity Security Services
Trinity is a leading independent information security solutions and services provider. Customers include a range of FTSE 250 companies across UK and Europe.

Trinity provides its customers with market leading expertise, delivering solutions ranging from the technical such as IDS, VPN and E-commerce, to strategic services including security policy and procedure development.

All Trinity consultants are hand-picked and the best in their field, ensuring that Trinity is strategically placed to deliver services and solutions.
For further information contact:
Simon Jenner CISSP - Principle Security Consultant
Simon.Jenner@trinitysecurity.com - (Mobile) 07780 603 307 - (DDI) 0870
3501284
Images can be accessed at:
http://www.trinitysecurity.com/Press/Trinity-Simon-Jenner-Press.jpg

Waheed Warden, MCIM
Channel Marketing Manager
Trinity Security Services
Waheed.Warden@trinitysecurity.com
www.trinitysecurity.com

M +44 (0) 7879 647 497
T +44 (0) 870 350 1284
F +44 (0) 845 280 2712

We don't compromise on your security