Next Sober worm on the way, may not do harm
The next variant of the Sober worm is set to attack computers already infected by previous versions of the malware at the stroke of midnight GMT as Jan. 5 turns into Jan. 6, according to European antivirus software vendors. Given that both Internet service providers and local police are closely monitoring Web sites likely to be used in the attack, security experts believe the hacker may choose not to engage in any malicious activity this time around.
"Nothing's posted yet [on the Web sites]," Carole Theriault, senior security consultant with Sophos, said on Wednesday. "It's possible he may stay well clear." Mikko Hypponen, chief research officer for F-Secure, agreed with Theriault. "It's more likely he'll lay low than engage in activation," he said. Nevertheless, the companies and their peers around the world are keeping a close eye on the situation in case the hacker does choose to launch an attack.
The last major Sober attack, Sober-Z, occurred in late November. At one point, an estimated one in 14 e-mails on the Internet carried it, according to Sophos.
