Zafi worm proves a holiday pest

The worm, which travels as an e-Christmas card, is clogging e-mail bandwidth and cropping up in the majority of virus reports.

The mass-mailing Christmas e-card virus Zafi.D is clogging huge amounts of bandwidth and now accounts for one in 15 of all e-mails, antivirus companies said on Thursday.

Sophos said the worm is responsible for 72 percent of virus reports in the last 24 hours.

"It's generating a lot of e-mail," said Graham Cluley, senior technology consultant at Sophos. "It's a bit quieter today than yesterday, when it was one in 10 e-mails. This is curious, because it's sending a lot of e-mail, but not necessarily everyone is receiving it."

Antivirus companies warned on Tuesday that the seasonal worm, which travels as an e-mail attachment, opens a back door that allows hackers to take remote control of infected PCs.

Cluley said that once the worm has penetrated a contacts book to send itself to the e-mail addresses stored there, it creates a large number of made-up e-mail addresses using existing domain names--for example, madeupaddress@zdnet.co.uk. Many of these e-mail addresses are reaching gateway servers, but not going any further, Cluley said.

"E-mail gateways will receive the message, but may not be able to send on that e-mail traffic. That means it doesn't get to everyone, but we still think it's a very aggressive virus. I think it will begin to disappear, but saying that, past Zafis have continued to lurk around for a while," Cluley said.

Russian antivirus company Kaspersky Labs said that most of Zafi's activity has been detected in Hungary. It said that the word Zafi comes from Hungarian word "hazafi," which means "patriot."

The worm, which was discovered on Tuesday, uses a variety of languages to spread, including English, French, Spanish and Hungarian.

Dan Ilett of ZDNet UK reported from London.

Featured Video
6
This content is rated TV-MA, and is for viewers 18 years or older. Are you of age?
Sorry, you are not old enough to view this content.

Apple to introduce next iPhone Sept. 9

A ton of new iPhone 6S details have hit; new strange data comes from the Ashley Madison leak; and Instagram says goodbye to the square photograph (sort of).

by Jeff Bakalar