Blaster worm could have come from China
A COMPUTER CONSULTANT has claimed that he first noticed the RPC Blaster worm coming from a box based in China, meaning it's going to be harder than US investigators think to get to the real perps.
Last week we reported that the Taiwanese government, in an unprecedented statement, claimed that the Chinese government was responsible for a series of cyberattacks on the island. (See Taiwan accuses China of waging Cyberwar).
But now Carey Hogan, a Canadian computer consultant, claims he has evidence that the Blaster worm started appearing in China before it ended up .
"Infections such as the Blaster worm use the RPC exploit. RPC is a needed service within all Win2000/XP. If the RPC service quits or is shut down, the computer will also shut down," he said.
Carey has sent us a series of screen shots to demonstrate his claims. He told the INQ: "The FBI will have to take a long trip overseas to capture the original creator of the Blaster, Sobig, RPC and DCOM exploit variants."