Security Incidents mailing list archives
[CyberAbuse] New trojan, Magisterium
From: Philippe Bourcier <philippe () CYBERABUSE ORG>
Date: Tue, 19 Dec 2000 17:56:48 +0100
Hi, Magisterium is a new trojan for Win controlled on IRC with crypted commands. We don't know a lot more about it. But there is already a total of 300 boxes. Also, one of the hacker, probably the leader said : I can distro to over 20 people in one day on gnutella ... We have no binaries yet. Here is a sample of the crypted messages it does :
CÜLí3g1h,o1y1z0};R8p4aFüZx94s.\iZ] CÜLí1~1|,o1S1x0t;7g3RFüZfi;rdC8\ CÜLì9q3s,y1P1w3~;o1g5wFüZmi8rNC;\ CÜLì8x3u,~1x1u1W;Q8n2}FüZei5rSCQ\ CÜLì7M3o,i1i1s3u;R7i3lFüZPi.r^Cb\ CÜLí0p1b,`1x1v0T;m6e1jF
You can see the list of hacked machines at http://www.documents.cyberabuse.org/?doc=16. The CyberAbuse AntiHack project ---------------------------------------------- www.documents.cyberabuse.org
Current thread:
- [CyberAbuse] New trojan, Magisterium Philippe Bourcier (Dec 19)