Full Disclosure mailing list archives
Re: Re: pnp worm unknown variant - post infection actions
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Wed, 17 Aug 2005 13:07:16 +1200
Jason Coombs to me:
Very good points, but can you think of another worm that downloaded XXX spyware/adware ?
I can't give you a specific name -- when I first saw it it didn't strike me as any more significant than the warez and porn FTP servers I'd seen years earlier, so didn't make specific note of it -- but there have been many. We see new bots every day (many dozen a week) that are issued orders on joining the C&C network to install all manner of adware, spyware, click-for-dosh agents and so on. Among those there will be many things dealing in "XXX" content but often analysis doesn't even go so far as checking that the target URL is still reachable... -- Nick FitzGerald Computer Virus Consulting Ltd. Ph/FAX: +64 3 3267092 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: pnp worm unknown variant - post infection actions Morning Wood (Aug 16)
- RE: Re: pnp worm unknown variant - post infectionactions frac (Aug 16)
- Re: Re: pnp worm unknown variant - post infection actions Jason Coombs (Aug 16)
- Re: Re: pnp worm unknown variant - post infection actions Nick FitzGerald (Aug 16)
- Re: Re: pnp worm unknown variant - post infection actions Jason Coombs (Aug 16)
- Re: Re: pnp worm unknown variant - post infection actions Nick FitzGerald (Aug 16)
- RE: Re: pnp worm unknown variant - post infectionactions Aditya Deshmukh (Aug 17)
- Re: Re: pnp worm unknown variant - post infection actions Nick FitzGerald (Aug 16)
- RE: Re: pnp worm unknown variant - post infectionactions Aditya Deshmukh (Aug 17)
- Re: Re: pnp worm unknown variant - post infectionactions Jason Coombs (Aug 17)
- Re: Re: pnp worm unknown variant - postinfectionactions Morning Wood (Aug 17)
- Re: Re: pnp worm unknown variant - postinfectionactions Valdis . Kletnieks (Aug 17)