A new variant of the Bagle virus, Bagle.cd or Bagle.da, depending upon with whom you are speaking, has hit the Internet, hiding itself in attachment files called “price_new.zip”, “price2.zip” or “09_price.zip”. This Trojan-launched virus is particularly nasty, in that it both turns off nearly every security program out there, and it also blocks access to known security sites. In short, all your computer are belong to Bagle.
The virus is thought to be being launched by a single hacker, sending it out in massive waves over two days earlier this week. According to Carole Theriault, of Sophos, “This is the second massive e-mail attack from this hacker in two days, the creator is obviously intent on infecting as many people as possible.”
So far each copy of Bagle.cd or Bagle.da has come in an email which says “new price”, and which contains an attachment (the BagleDI-U trojan) which is called either “price_new.zip”, “price2.zip” or “09_price.zip.”
So, if you get such a file in email (or, indeed, any other suspect, unexpected file), don’t open it!
The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.