Full Disclosure mailing list archives

Re: Possible First Crypto Virus Definitely Discovered!


From: "Gregh" <chows () ozemail com au>
Date: Wed, 9 Jun 2004 09:53:46 +1000

I think the original OP just didn't know how to spell some words correctly.
I believe he actually meant to refer to a "krypto virus" which is one that
affects the Superman factor meaning that those of us who are supposed to
know it all and do it all, 24 hours a day without rest or even a shit, would
start to finally lose that veneer of invulnerability!

(Stranger from a strange I.T, Planet. Jumps firewalls in a single bound!
Faster than a 3.4ghz CPU! Look! Up in the sky! It's a bird! It's a plane! Oh
no, wait - it's chicken bloody little again!)


----- Original Message ----- 
From: "Goudie, Derek" <derek.goudie () earthtech ca>
To: <full-disclosure () lists netsys com>
Sent: Wednesday, June 09, 2004 6:54 AM
Subject: RE: [Full-disclosure] Possible First Crypto Virus Definitely
Discovered!


Thanks!  I needed that....

-----Original Message-----
From: Jakob Jünger [mailto:krimskram () freenet de]
Sent: Tuesday, June 08, 2004 1:01 PM
To: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] Possible First Crypto Virus Definitely
Discovered!

Hi,

I just can admit to what Billy wrote. The Firewall of my PDA is getting
hot. It plays "Yellow Submarine" everytime I press the escape-key. It
has to be something like this crypto-thing. I don't know what "crypto"
means but it seems to be encrypted with EnglishLanguageProtocol.
Believe me, I have been the administrator of my PDA since I was three
years old.

Jakob

Whatever ssl is, I don't know but it's using the so-called "ssl"
port on the web servers.

But this port 443 is not SSH! Why should it be encrypted? And what
is this "ssl" thing? I've been in IT for many years and I am now IT
Director here at the bank... I would think that I would know what
"ssl" would be. I don't think this worm has anything to do with
whatever "ssl" is. Does anybody even still use ssl? That's probably
why the hackers chose it.

Sorry to say but it is not! I checked my incoming traffic again this
morning
and the attack on port 443 is still coming in full steam ahead! I
don't know
what's going on, but I am about to block that port on my firewall.
Some
nitwit (probably the idiot that was here before I became IT Director)
somehow, for some reason, deliberately opened port 443 on the
firewalls!

I am beginning to think that this is the first wave of the new coming
global
crypto-storm!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: