MYDOOM Code Re-Used in DDoS on U.S. and South Korean Sites

A different version of the MyDoom (the earlier version was discovered in 2004) virus is responsible for a large scale DDOS (Distributed Denial of Service) on many high profile US and South Korean sites.

The virus harvests email addresses from all files located in the affected system’s Temporary Internet Files folder. It also gathers domain names, and uses them to add more email addresses by pre-pending the user common names. Files related to network analysis tools are also deleted in order to prevent the affected user from noticing the much increased network activity caused by the DDoS attack. Users are strongly advised to ignore unsolicited emails to avoid unwillingly partaking in this massive attack.

Continue to read the article...