Ken Dunham
Ken Dunham
plenty ways
There are plenty of ways to get around all of those things.
computers connect date download found infected last likely reverse sober works
We did reverse engineering on the variants, and found this date in the code. The way this works is that at a pre-determined time, computers already infected with Sober will connect with specified servers and download a new payload, which will likely be spammed out in the millions, as was the last version.
identified increases likelihood widespread
This increases the likelihood of exploitation, but widespread exploitation has not been identified to date.