Re: patternmatch for scan

[Laurent LEVIER <llevier () argosnet com>]

Both are a single trojan : RingZero :)

At 08:56 19/02/00 -0500, Kenneth_W_Fox () sbphrd com wrote:
> Is anyone familiar with an attack or probe which begins or ends with scanning
> only ports 3128 & 8080 on a target box? I've been seeing alot of this lately in
> various places.
>
> Ken

Laurent LEVIER
IT Systems & Networks, Unix System Engineer
Security Specialist

Argosnet Security Server : http://www.Argosnet.com
"Le Veilleur Technologique", "The Technology Watcher"