Full Disclosure mailing list archives
Re: new worm traveling the net? (GNU/Linux)
From: Timo Schoeler <timo.schoeler () riscworks net>
Date: Mon, 19 Feb 2007 23:43:45 +0100
In epistula a Michal Zalewski <lcamtuf () dione ids pl> die horaque Mon, 19 Feb 2007 22:17:43 +0100 (CET):
On Mon, 19 Feb 2007, Timo Schoeler wrote:catchthismail () domain tld [...] is this a new worm spreading or something already known?More like a spambot probe of some sorts. http://groups.google.com/groups?hl=en&q=catchthismail
maybe a pattern: header of the postings there show Sun Java System Messaging Server 6.1 HotFix 0.07 (built Feb 20 2004) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- new worm traveling the net? (GNU/Linux) Timo Schoeler (Feb 19)
- Re: new worm traveling the net? (GNU/Linux) Michal Zalewski (Feb 19)
- Re: new worm traveling the net? (GNU/Linux) Timo Schoeler (Feb 19)
- Re: new worm traveling the net? (GNU/Linux) Timo Schoeler (Feb 19)
- Re: new worm traveling the net? (GNU/Linux) Przemyslaw Frasunek (Feb 20)
- Re: new worm traveling the net? (GNU/Linux) Michal Zalewski (Feb 19)