Full Disclosure mailing list archives
Re: Sobig has a surprise...
From: Florian Weimer <fw () deneb enyo de>
Date: Fri, 22 Aug 2003 21:19:39 +0200
Steve Postma <spostma () travizon com> cites:
However, the Sobig.F worm has a surprise attack in its sleeve."
From the web site:
| "As soon as we were able to crack the encryption used by the worm to | hide the list of the 20 machines, we've been trying to close them | down", explains Mikko Hypponen. 18 of 20 addresses where known to the AV community since Tuesday. I don't know what F-Secure is doing here. Why don't they publish the list of IP addresses so that people can put filters on their networks? *sigh* _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Sobig has a surprise... Steve Postma (Aug 22)
- Re: Sobig has a surprise... Florian Weimer (Aug 22)
- Re: Sobig has a surprise... Jamie L Thompson (Aug 22)
- Re: Sobig has a surprise... Michael Scheidell (Aug 22)
- Re: Sobig has a surprise... Paul Schmehl (Aug 22)
- Re: Sobig has a surprise... Florian Weimer (Aug 23)
- Re: Sobig has a surprise... Paul Schmehl (Aug 23)
- Re: Sobig has a surprise... Florian Weimer (Aug 22)
- <Possible follow-ups>
- RE: Sobig has a surprise... Jonathan Grotegut (Aug 22)
- Re: Sobig has a surprise... Michael Scheidell (Aug 22)
- Re: Sobig has a surprise... Paul Schmehl (Aug 22)
- RE: Sobig has a surprise... Paul Schmehl (Aug 22)
- RE: Sobig has a surprise... Ron DuFresne (Aug 23)
- Re: Sobig has a surprise... Michael Scheidell (Aug 22)