Bagle.B hits Germany and France

A new version of the mass mailing worm Bagle.A, W32/Bagle.B, is in the wild and is likely to spread, according to alerts from BitDefender, F-Secure, Norman Data and Sophos.

Also known as W32/Tanx, the worm spreads via email and arrives with the subject line 'ID' alongside random characters, according to Sophos reports. The message text usually states, 'Yours ID.'

Attached to the message is a randomly titled .exe file. If recipients try to open the attachment, they unknowingly enable the ability for hackers to gain remote access. In addition to this, the worm also harvests email addresses from infected PCs. The problem arises from the virus' spoofing of the sender's address to fool recipients into opening the email.

BitDefender experts have found infections of the worm in France and Germany and predict the worm will spread more in the near future. The company has already made available a free tool against the new worm on its web site,

Meanwhile, F-Secure reports that while the worm is infecting machines quickly, it is programmed to stop on Feb. 25.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.