• Why Jihad Watch?
  • About Robert Spencer and Staff Writers
  • FAQ
  • Books
  • Muhammad
  • Islam 101
  • Privacy

Jihad Watch

Exposing the role that Islamic jihad theology and ideology play in the modern global conflicts

Cyber-jihad group implicated in massive virus attack earlier this week

Sep 11, 2010 2:03 am By Marisol Seibold

The security vendor SecureWorks has traced the virus to a cyber-jihad group called Tariq ibn Ziyad, named after an 8th-century Muslim conquerer of Spain (also the name of the “Minnesota Madrassa” we have covered here, if the name seems familiar). The symbolism of the name is indeed telling.

“Cyber jihad group linked to ‘Here you have’ worm,” by Robert McMillan for Computer World, September 10:

IDG News Service – A fast-spreading e-mail worm that crashed systems Thursday may be linked to a cyber jihad organization called Tariq ibn Ziyad, according to security vendor SecureWorks.

The “Here you have” worm spread like wildfire through some computer networks, bringing e-mail servers down and reportedly disrupting large U.S. organizations including Disney, Proctor and Gamble, Wells Fargo, and NASA (National Aeronautics and Space Administration). It’s known as “Here you have” because that is sometimes the subject line of the messages used to spread the malware.

Much of the worm’s code is identical to an earlier piece of malware that was released last month, and both worms refer to a Libyan hacker who uses the name Iraq Resistance, who has been trying to form a hacking group called Brigades of Tariq ibn Ziyad, said Joe Stewart, director of malware research with SecureWorks.

“Either this person is involved with this virus, or somebody wants to make it seem like this person’s group is involved in this virus,” Stewart said. “There are a lot of pointers to that group.”

The goal of Tariq ibn Ziyad is “to penetrate U.S. agencies belonging to the U.S. Army,” Iraq Resistance said, according to a Google translation of his post announcing the group.

Iraq Resistance did not respond to an e-mail sent to his Yahoo address seeking comment.

It’s not clear why the first version of worm did not spread widely last month — security vendor Symantec rated it a “low” risk — but Stewart said that the people behind it may have spammed more initial victims this time around. “Here you have” may also include new components that caused it to spread more effectively.

The August worm used the e-mail address Iraq_resistance@yahoo.com, and the words Iraq Resistance appear in the binary code of the latest version of the software. Also, a back-door component of the worm — which could be used by creators to remotely log into an infected system — tries to connect to a computer that uses the Tariq ibn Ziyad name. Other components of the worm — a password stealer and the e-mail sending software – were written by Arabic speaking programmers, another clue that Iraq Resistance may be behind the worm….

Share this:

  • Click to share on Facebook (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on WhatsApp (Opens in new window)
  • Click to print (Opens in new window)
  • Click to email this to a friend (Opens in new window)
  • More
  • Click to share on Skype (Opens in new window)
  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Telegram (Opens in new window)
  • Click to share on Tumblr (Opens in new window)
  • Click to share on Pocket (Opens in new window)
  • Click to share on Pinterest (Opens in new window)

Follow me on Facebook

Filed Under: Uncategorized


Learn more about RevenueStripe...

FacebookYoutubeTwitterLog in

Subscribe to the Jihad Watch Daily Digest

You will receive a daily mailing containing links to the stories posted at Jihad Watch in the last 24 hours.
Enter your email address to subscribe.

Please wait...

Thank you for signing up!
If you are forwarding to a friend, please remove the unsubscribe buttons first, as they my accidentally click it.

Subscribe to all Jihad Watch posts

You will receive immediate notification.
Enter your email address to subscribe.
Note: This may be up to 15 emails a day.

Donate to JihadWatch
FrontPage Mag

Search Site

Translate

The Team

Robert Spencer in FrontPageMag
Robert Spencer in PJ Media

Articles at Jihad Watch by
Robert Spencer
Hugh Fitzgerald
Christine Douglass-Williams
Andrew Harrod
Jamie Glazov
Daniel Greenfield

Contact Us

Terror Attacks Since 9/11

Archives

  • 2020
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2019
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2018
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2017
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2016
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2015
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2014
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2013
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2012
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2011
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2010
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2009
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2008
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2007
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2006
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2005
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2004
    • December
    • November
    • October
    • September
    • August
    • July
    • June
    • May
    • April
    • March
    • February
    • January
  • 2003
    • December
    • November
    • October
    • March

All Categories

You Might Like

Learn more about RevenueStripe...

Recent Comments

  • Eva on Chief Rabbi of UK Says It’s ‘Alarming’ That 44% of Muslims Are Anti-Semitic
  • Infidel on Chief Rabbi of UK Says It’s ‘Alarming’ That 44% of Muslims Are Anti-Semitic
  • Eva on Chief Rabbi of UK Says It’s ‘Alarming’ That 44% of Muslims Are Anti-Semitic
  • Infidel on Greece, Cyprus, Egypt, France and UAE conduct joint military exercises amid rising Turkish threat
  • Infidel on India: Police make first arrest for ‘love jihad’ under new law

Popular Categories

dhimmitude Sharia Jihad in the U.S ISIS / Islamic State / ISIL Iran Free Speech

Robert Spencer FaceBook Page

Robert Spencer Twitter

Robert Spencer twitter

Robert Spencer YouTube Channel

Books by Robert Spencer

Jihad Watch® is a registered trademark of Robert Spencer in the United States and/or other countries - Site Developed and Managed by Free Speech Defense

Content copyright Jihad Watch, Jihad Watch claims no credit for any images posted on this site unless otherwise noted. Images on this blog are copyright to their respective owners. If there is an image appearing on this blog that belongs to you and you do not wish for it appear on this site, please E-mail with a link to said image and it will be promptly removed.

Our mailing address is: David Horowitz Freedom Center, P.O. Box 55089, Sherman Oaks, CA 91499-1964

loading Cancel
Post was not sent - check your email addresses!
Email check failed, please try again
Sorry, your blog cannot share posts by email.