Sophos is not false alarming on the Delphi Induc virus

Robert Poston over in the Vancouver branch of SophosLabs has posted an recently reported W32/Induc-A virus.

As Robert explains, in all cases Sophos’s detections were shown to be legitimate and the files were infected. Indeed, it seems that it is very unlikely that we will ever see a false positive from Sophos regarding this unusual Delphi code virus – so if we say a file is infected, it is!

It’s possible that some of the disbelief may have come about because users have misunderstood media reporting of the virus, and believe that only Delphi software houses can contract the malware.

However, if you’re a regular run-of-the-mill user you can still download or install code which a Delphi programmer doesn’t realise was tainted by W32/Induc-A. Furthermore, you…

Read more in my article on the Naked Security website.

Found this article interesting? Follow Graham Cluley on Twitter, Mastodon, or Threads to read more of the exclusive content we post.


Graham Cluley is a veteran of the cybersecurity industry, having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. Now an independent analyst, he regularly makes media appearances and is an international public speaker on the topic of cybersecurity, hackers, and online privacy. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.