The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
The Flame worm (aka Flamer, Skywiper, W32/Flame-A) is a piece of malware that is getting a lot of media attention. Much of the information about it has come from the Iranian Computer Emergency Response Team (MAHER), and it is said to be more prevalent in the Middle East and Iran in particular. The malware is made up of a number of modules, each with different functionality, and is supposedly 20 MB in size, which is extremely large for malware. Sophos detects components of the Flame worm as W32/Flame-A and W32/Flame-Gen, and there are descriptions on the website for each of these. The following blog articles have more information and are excellent places to learn more:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.