SHARE
Facebook X Pinterest WhatsApp

Another Microsoft Patch, Another Masquerade

Trying to capitalize on the latest mega-patch released last week by Microsoft, a strain of the SWEN/Gibe virus is once again posing as a Microsoft security patch in an effort to trick users into running a so-called Trojan Horse that opens up computers to remote attacks. But what makes this deceptive e-mail more dangerous this […]

Written By
thumbnail Bob Liu
Bob Liu
Oct 20, 2003
Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Trying to capitalize on the latest mega-patch
released last week by Microsoft, a strain of the SWEN/Gibe virus is once
again posing as a Microsoft security patch in an effort to trick users into
running a so-called Trojan Horse that opens up computers to remote attacks.

But what makes this deceptive e-mail more dangerous this time is that it
poses as one of the actual Microsoft patches released last week, security
patch No. MS03-047.

“So, this Trojan is just jumping on the bandwagon of trying to get code
distributed via social engineering,” explained Ken Durham, Malicious Code
Intelligence Manager for Virginia-based iDefense.

“The Swen worm shows how effective this type of socially engineered
attack can be, continuing to spread to thousands of computers still today.”

Durham told internetnews.com that while Swen (formerly known as
W32.Swen.A@mm or W32.Gibe.B@mm) was slow moving at first, it has
proliferated nearly 3 million times since late September with small- and
home-offices as well as the Far East region proving to be most vulnerable.

Part of the problem is that Swen arrives in the inbox as a .ZIP file that
needs to be executed and many companies still allow .ZIP files through the
firewall.

Durham said this new Trojan is actually a variant of the SDBot Trojan
horse family that provides the attacker with
complete backdoor access to a compromised computer. MessageLabs has given an
initial name to this new threat, Troj/Sdbot.R, aka SDBot.R.

As previously
reported
, Microsoft said it never e-mails software patches.

  SEE ALL
ARTICLES
 

Recommended for you...

4 Popular Master Data Management Implementation Styles
Drew Robb
Aug 22, 2023
IBM Migrating to SAP Cloud ERP
Chris Ehrlich
Jun 7, 2022
Microsoft Adopting SAP Cloud ERP Software
Chris Ehrlich
Apr 20, 2022
Panasonic Implementing Oracle Cloud ERP Software
Chris Ehrlich
Mar 14, 2022
Datamation Logo

Datamation is the leading industry resource for B2B data professionals and technology buyers. Datamation's focus is on providing insight into the latest trends and innovation in AI, data security, big data, and more, along with in-depth product recommendations and comparisons. More than 1.7M users gain insight and guidance from Datamation every year.

Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.