RE: [Unpatched] PivX Predictions Confirmed, Qwik-Fix Protected

["Alerta Redsegura" <alerta () redsegura com>]

The following is an excerpt from a PivX statement which is worth quoting:

---

"PivX Predictions Confirmed, Qwik-Fix Protected
Over the course of the last 2 years, PivX Solutions has warned the security
industry and the public about the possibility of automatically executing
email worms. This week, we have seen the launch of the first such successful
mass-emailing worm, namely Bagle.Q and its variants.

These worms differ from ordinary email borne viruses in that they require no
user interaction such as opening an email attachment. Instead, they
automatically infect a user’s machine the instant the email is displayed."

---

Bagle.Q the "first successful mass-emailing worm" able to auto-execute when
previewed or read????

What about Nimda, Bugbear, Klez and all the saga of auto-executing email
worms that started back in 2001?

I must be missing something...


Iñigo Koch
Red Segura




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html