Bagle Worm Variants Use Multiple-stage Process to Attack PCs

The latest variants of the Bagle worm have alarmed antivirus companies because of the multiple-stage process they use to attack PCs.

The variants which Computer Associates International has given a new name  "Glieder" because it says they are so different from previous Bagle worms, combine several elements in a way not seen before. In this staged approach, viruses seed their victims, then disarm them, and then finally exploit them.

"We've seen blended threats before where a virus uses several methods to spread, but not like this" said Chris Thomas, a Computer Associates Australia security architect.

The Win32.Glieder worm spreads using a common mass-mailing method, relying on people to click on an attachment so it e-mails itself on to names in the address book. "This is the beachhead," said Thomas. "The whole point is to get to as many victims as fast as possible with a lightweight piece of malware." On Tuesday, CA saw eight variants released.   Full Article at CNET News

Tags: anti virus, virus protection, antivirus, Bagle worms, Trojan, Win32.Glieder worm