Did Sasser worm strand 300,000 train travellers? Sophos reports

Sophos Press Release

According to Australian media reports, the new Sasser internet worm may be being blamed for 300,000 train travellers being stranded in Sydney yesterday.

A failure of Sydney's train radio network left many railway stations closed, with only 20% of trains running.

RailCorp apologised for the inconvenience to customers, explaining that it could have been the Sasser worm which disrupted communications between train drives and signal boxes.

"It could very well be a matter related to a virus getting into the system," said Vince Graham, CEO of RailCorp, "There's no evidence that hacking is an issue here, the viral infection could very well have been introduced by our own people not taking sufficient care."

"It's hard to know whether the Sasser worm was responsible for the disruption to the Australian railway system this weekend," said Graham Cluley, senior technology consultant for Sophos. "What is clear is that all companies should put measures in place to properly secure their systems from Sasser and other malicious attacks."

More than 100 million users in 150 countries rely on Sophos’ complete security solutions as the best protection against complex threats and data loss. Simple to deploy, manage, and use, Sophos’ award-winning encryption, endpoint security, web, email, mobile and network security solutions are backed by SophosLabs - a global network of threat intelligence centers. Sophos is headquartered in Oxford, U.K., and is publicly traded on the London Stock Exchange under the symbol “SOPH.” More information is available at www.sophos.com/company.