{"id":549489,"date":"2006-07-11T23:02:23","date_gmt":"2006-07-11T23:02:23","guid":{"rendered":"http:\/\/localhost:8888\/wordpress\/technology\/549489-network-worm-threatens-enterprise-security.html"},"modified":"2006-07-11T23:02:23","modified_gmt":"2006-07-11T23:02:23","slug":"network-worm-threatens-enterprise-security","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/technology\/549489-network-worm-threatens-enterprise-security.html","title":{"rendered":"Network worm threatens enterprise security"},"content":{"rendered":"<p><font size=\"2\">Security analysts at MicroWorld Technologies say that &#8216;Win32.Detnat.a&#8217; is a network worm that infects uncompressed Portable Executable (PE) files. With its unique algorithm and polymorphic nature, the worm employs a different mode of encryption each time it infects a file, while keeping the file size unchanged, making it hard to detect.<\/font> <\/p>\n<p><font size=\"2\">Detnat.a spreads on shared network resources and file sharing programs. At the second level of attack, the worm goes ahead and downloads &#8216;Infostealer.Lineage&#8217;, a Trojan that steals usernames and passwords of popular online game &#8216;Lineage&#8217; and passes it on to the remote attacker. With its dynamic nature, Detnat can invite any other Trojan as well, if the writer of the worm decides to.<\/font> <\/p>\n<p><font size=\"2\">\u201cOne needs to be extremely careful while downloading executable attachments via e-mails or from the Internet,\u201d says Aneesh Paliwal, security analyst at MicroWorld Technologies. \u201cA single infection in a workstation can proliferate in shared networks in no time. People using file sharing programs are particularly vulnerable to this mode of data corruption and theft.\u201d <\/font><\/p>\n<p><font size=\"2\">Individual users and subgroups can freely exchange files in the internal networks of most organisations. This makes it easier for the spreading routine of a worm like Detnat. If the worm stations itself in the start-up folder of the workstation connected to a network, then it will come back every time when that computer reboots, even if one cleans up the entire network. In a more targeted operation, an attacker hitting the server can ensure that every user logging on to that server gets infected, points out Paliwal.<\/font> <\/p>\n<p><font size=\"2\">\u201cA large number of new and emerging Viruses and worms are targeting enterprises and their external and internal networks, to carry out a whole lot of nefarious activities,\u201d observes Govind Rammurthy, CEO of MicroWorld Technologies. \u201cOften, malware creeps in through those vulnerabilities that we tend to overlook. One needs to safeguard the corporate e-mail system, intranet and total Internet access with great vigil as network infections can severely impact the business continuity of enterprises.\u201d<\/font> <\/p>\n<p><a href=\"http:\/\/mybroadband.co.za\/vb\/showthread.php?t=47817\" target=\"_blank\" rel=\"noopener\"><font color=\"#0000ff\" size=\"2\">Discuss this article<\/font><\/a> <\/p>\n<p \/>\n","protected":false},"excerpt":{"rendered":"<p>If you are used to sharing data over the Internet or your enterprise&#8217;s intranet, apply caution! A network worm that will bring dangerous Trojans to your computer is on the prowl.<\/p>\n","protected":false},"author":23,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-549489","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/549489"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=549489"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/549489\/revisions"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=549489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=549489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=549489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}