|
A worm exploiting weak database passwords on Windows computers had essentially stopped spreading on Friday, after the systems infected with the program were cut off from the control of several central computers.
More than 8,000 Windows computers running the MySQL database were probably infected with the worm, referred to as MySpool or by the name of the executable file, SpoolCLL, that the worm installs on vulnerable machines. The program did not spread on its own, but downloaded targets from IRC servers. Oliver Friedrichs, senior manager for incident response at security technology maker Symantec, said those have been made inaccessible, virtually stopping the worm.
|