As corporate IT departments go about the business of cleaning up their networks, there are strong indications that the SQL Slammer worm that brought down portions of the Internet over the weekend is based on the work of an obscure Chinese cracking group.

Signatures within the worm's source code indicate that a group known as the Honker Union of China-also known as the Hacker Union of China-may be responsible for writing the code, according to security experts who have analyzed the code. However, experts caution that although they are certain of the code's origins, someone else may have actually loosed the worm on the Internet.

Read more