Internet threat level: 1
Home→Blog→What we detect→Zafi
|
14 Dec Patriot on the loose Costin Raiu 27 Oct New Zafi, New cyberwar? Aleks Join our blog You can contribute to our blog if you have +100 points. Comment on articles and blogposts, and other users will rate your comments. You receive points for positive ratings. |
A new variant in the Zafi ("HAZAFI" means "patriot" in hungarian) family started to spread earlier today and seems to be propagating pretty fast. Currently, Zafi.D is number one in the stats at http://virus.freemail.hu/, a position earned in just a few hours.
Detection for Email-Worm.Win32.Zafi.d was delivered at around 9am Moscow time(GMT+3) in one of the morning's antivirus database updates.
Analysis
Alerts
We detected a new variant of Zafi today, Zafi.c. The first two Zafi's spread widely, so we plan to keep a close eye on how things go.
It seems that Zafi.c was written in Hungary. The difference between Zafi.a and Zafi.b is that the author decided to join the cyberwar between the Mydoom, Bagle and Netsky authors. He included the following message:
Analysis
Blog
Alerts
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.