Forbot worm uses brute force to break into MySQL databases
Virus experts at Sophos have warned computer users about a new variant of the Forbot worm which targets MySQL open-source database software on Windows computers connected to the internet. MySQL is a popular alternative to Microsoft's SQL Server database software, and there are said to be more than 5 million installations worldwide.
The W32/Forbot-DY worm (also called UDF or MySpool) is the latest in a long line of worms in the Forbot family, which first began to appear in mid-2004.
Aside from spreading across the internet, the worm also attempts to create a zombie bot network which would allow remote hackers to launch a distributed denial-of-service attack from infected computers.
"System administrators should ensure that the computers under their care are properly protected with the latest anti-virus software, sensible firewall configurations and up-to-date security patches," said Graham Cluley, senior technology consultant for Sophos. "If you take the necessary steps then malicious malware will find it as hard to spread as frozen butter."
