Some info on Sober.q

After some analysis it seems that Sober.q hasn’t yet begun spreading, yet.

Probably the author only wants the Worm to start spreading when enough computers have been infected with it.

That way it may prove more effective, but it also opens up a bigger window of oppertunity for the anti-virus vendors to respond.

The other interesting thing about Sober.q is that it contains a message. It’s a message in German in which the author refers to some online articles which state he is a spammer. He states that he is not a spammer, but might turn into one.

It’s not the first time the Sober author has enclosed a message into his creations, a previous message was aimed at the anti-virus vendors.

Some info on Sober.q

Your email address will not be published. Required fields are marked *



APT trends report Q1 2024

The report features the most significant developments relating to APT groups in Q1 2024, including the new malware campaigns DuneQuixote and Durian, and hacktivist activity.

Subscribe to our weekly e-mails

The hottest research right in your inbox