Santy worm attacks phpBB sites...

From software to hardware, breakthough to disaster, it all belongs here!

Moderator: CricketMX Forum Moderators

Post Reply
me here
Healing Hands
Healing Hands
Posts: 1919
Joined: Wed May 12, 2004 7:44 pm

This was brought to my attention by a friend today..and thought was interesting reading...

The worm, dubbed Santy.A, uses a vulnerability in a popular free software package called phpBB to spread across the Internet, infecting computer servers that host online bulletin boards and defacing those sites with the words "This site is defaced!!! NeverEverNoSanity WebWorm."

Google Squashes Santy Worm
Published: December 21, 2004
Antivirus companies say the Santy worm, which searches Google for sites that use a vulnerable version of the phpBB bulletin board software, was spreading quickly and had already infected about 40,000 Web sites by Tuesday evening.

On Wednesday, a Google representative told ZDNet Australia that though Google users were not at risk from Santy, the search company had started blocking attempts by the worm to replicate.
http://news.com.com/Google+squashes+San ... g=nefd.hed
Image
A World Dominated by WinMX
http://www.winmxworld.com/
Freggle
Know-It-All
Know-It-All
Posts: 253
Joined: Tue Jun 29, 2004 1:29 pm
Contact:

Look how much websites it got :shock:
343.000 results - Alot of them have been fixed by now I think.

Thx god msn-problems and cricketmx are (somewhat) safe :D
User avatar
battye
Site Admin
Site Admin
Posts: 14391
Joined: Sun Jan 11, 2004 8:26 am
Location: Australia
Contact:

Gone up to 482.000 since then :shock:
CricketMX.com in 2022: Still the home of bat's, rat's and other farmyard animals!

"OK, life [as you chose to define it] repeats until there are no more lessons to be learned." - nrnoble (June 12, 2005)
"the new forum looks awesome, it's getting bigger & better" - p2p-sharing-rules (11 Jan, 2008)
"Looks like CMX is not only getting bigger...but, also getting better!!" - moongirl (14 Dec, 2007)
User avatar
Rat
Drain Brain
Drain Brain
Posts: 4476
Joined: Mon Jun 14, 2004 9:38 am
Location: in the dark

Umm... the search is too broad. If you search for the whole of the 'defaced' message you only get 48,100 hits which matches what the anti virus sites are saying. I think your search is also spotting sites discussing the worm which includes news sites and forums.
User avatar
Red XIII
Sultan Ruler Of The Poles!
Sultan Ruler Of The Poles!
Posts: 8317
Joined: Sun Feb 01, 2004 5:28 am
Location: Cheese Head

I think maybe Rat has the right point on this one...
Die Verstorbenen werden wieder in einem Fluss des Bluts steigen
Post Reply