Sobig

Aliases: Palyh

First seen
2003-01-09 00:00:00
Malware type
worm
Family
Malware family
Profile updated
2026-07-07 15:20:39

Context

Sobig is a highly infectious mass-mailing computer worm that spreads through email attachments and network shares. It was first discovered in early 2003 and caused widespread disruption by sending itself to email addresses found on infected computers.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Sobig_Auto (yara-rule)

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Sobig (report)
  • edition.cnn.com — Index (report)

External references