By now most of you have probably seen the reports on the santy.a worm that used a vulnerability in PHP (or PHPBB, some argument there).
This was a particularly destructive worm to those sites that were affected.
This particular worm made use of Google search to identify potential targets. The number of queries generated by this worm was small enough to be down in the noise relative to the normal activity. We were finally notified early Tuesday and by late afternoon we had begun blocking the worm's search queries. The worm should have started dying off almost immediately.
Stephen
--
#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#
Name Removed - Information Security Officer -
Removed@google.com
Google, Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Phone: +Removed Fax: +Removed
The church is near, but the road is icy.
The bar is far away, but I will walk carefully. -- Russian Proverb
-+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+
