nanog mailing list archives

Brace yourselves.. W32/Sobig-F about to mutate...


From: Valdis.Kletnieks () vt edu
Date: Fri, 22 Aug 2003 14:07:08 -0400

A quick heads up, if anybody hasn't heard:

At 1900GMT today, ET phones home, and picks up the next payload of
instructions.  Nobody knows (yet) what they'll be, but SoBig-E erased itself,
put in a password grabber, and then installed a mail proxy for spammer use.

This one *may* just play the theme song from Bozo the Clown and erase itself,
but I severely doubt it's gonna be that nice.

http://www.f-secure.com/news/items/news_2003082200.shtml

Attachment: _bin
Description:


Current thread: