The Sasser Event: History and Implications

Normally I'm reluctant to post a vendor white paper, mostly because they contain little technical information and are more marketing than substance. However, this is an exception to that trend. While the Sasser worm event is now well over a year and a half gone, the timeline itself is intriguing to study. Trend Micro has written up a nice, detailed overview of the event which may be interesting to Wormblog readers.

This White paper is not an exhaustive technical guide on how SASSER operates and how to deal with it. Rather, it presents the said malware family as an event that has a unique context. Hence, this study is primarily concerned with SASSER’s behavior in relation to other chronological events and other malware families.

Source: The Sasser Event: History and Implications [PDF], from Trend Micro.