Eye-witness account of a global virus outbreak
On Sunday the 14th we found a new virus around noon. Nothing special there, except that this one was using a brand new exploit against a brand new vulnerability: the MS05-039 PnP hole. I was the viruslab oncall manager for the week, so I called up other oncall people to work on the case. Jarkko analysed the virus from his home office and Jarno made his way to the office to test and publish a new update to detect this critter.
We added detection with the name "Zotob". I wrote a short blog entry on the incident and we moved on.
By Mikko at F-Secure.
[ Read more ]