The cyber attack sparked major cuts in the printing and delivery on Saturday in the Los Angeles Times and other major US newspapers, including those owned by Tribune Publishing Co, such as Chicago Tribune and Baltimore Sun.
The cyberman appears to be coming out of the United States, the Los Angeles Times reported, citing the source with the knowledge of the situation.
The attack led to a postponement of distribution in Saturday's edition of The Times, Tribune, Sun and other newspapers that share the production platform in Los Angeles, the Los Angeles Times reported.
Tribune Publishing, whose newspapers include New York Daily News and Orlando Sentinel, said they initially discovered malware on Friday.
The Wall Street Journal and the New York Times's West Coast publications were affected, as they were printed on a common production platform, the Los Angeles Times reported.
A survey by US authorities
A spokeswoman for Tribune Publishing, Marisa Kolias, said the virus had damaged back-office systems used to publish and produce "newspapers across our property".
"There is no evidence that customer credit card information or personal data is compromised," Kolias said in a statement
The Wall Street Journal and the New York Times did not immediately respond to comments requests.
Most subscribers to San Diego Union Tribune on Saturday did not have a newspaper because the virus infected the company's business systems and undermined its ability to publish, newspaper editor and publisher Geoff Lite said on its website.
A spokesman for the US Department of Homeland Security said he was studying the situation.
"We are aware of reports of a potential cyber incident that affects several news sites and we work with our government and industry partners to better understand the situation," said DHS spokeswoman Katie Waldman in a statement.