Security Incidents mailing list archives
Re: Interesting DNS update traffic
From: Bill McCarty <bmccarty () pt-net net>
Date: Mon, 29 Mar 2004 16:00:16 -0800
Hi Sean,--On Monday, March 29, 2004 4:56 PM -0500 Sean Brown <srbrown () appgeo com> wrote:
So, anyone seen anything like this before?
Superficially, your report seems to be consistent with traffic related to the Trojan known as Calypso. See, for example, <http://cert.uni-stuttgart.de/archive/intrusions/2003/10/msg00154.html>.
--------------------------------------------------- Bill McCarty --------------------------------------------------------------------------- Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, wireless security Protect your network against hackers, viruses, spam and other risks with Astaro Security Linux, the comprehensive security solution that combines six applications in one software solution for ease of use and lower total cost of ownership.Download your free trial at http://www.securityfocus.com/sponsor/Astaro_incidents_040301
----------------------------------------------------------------------------
Current thread:
- Interesting DNS update traffic Sean Brown (Mar 29)
- Re: Interesting DNS update traffic Bill McCarty (Mar 30)
- Re: Interesting DNS update traffic Todd Hayton (Mar 30)
- <Possible follow-ups>
- RE: Interesting DNS update traffic Sean Brown (Mar 30)
- RE: Interesting DNS update traffic Sean Brown (Mar 30)
- RE: Interesting DNS update traffic Sean Brown (Mar 30)