Security Incidents mailing list archives

RE: Unicode worm?

From: "Deus, Attonbitus" <Thor () HammerofGod com>
Date: Thu, 22 Aug 2002 08:56:44 -0700


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 09:26 PM 8/21/2002, Larsen, Colin wrote:

I get this every day. Usually in batches of 8 to 16 probes. Mostly from
China, Korea (even 2 nights of a couple of hundred probes from an Asian IT
university!)I figure its a fact of life that anything attached to the big
wide world is gonna get shot at.



These could very well be different boxes gathering reconnaissance 
information.  The old "pre-built attack map for a surgical strike" kind of 
thing.

Ya never know.

AD


-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQA/AwUBPWUJvIhsmyD15h5gEQITzwCfe+muMXtTJW21wlMaWFp0cBq1SnYAniwY
1z9OD3psZd2MIIcnotyAjl2U
=oLYr
-----END PGP SIGNATURE-----


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Current thread:

Unicode worm? Turner, Keith (Contractor) (Aug 21)
- Re: Unicode worm? Soeren Ziehe (Aug 21)
  - Re: Unicode worm? John Sage (Aug 21)
- Re: Unicode worm? Kurt Seifried (Aug 22)
  - Re: Unicode worm? Jonathan Rickman (Aug 23)
- <Possible follow-ups>
- RE: Unicode worm? Larsen, Colin (Aug 21)
  - Re: Unicode worm? Dean White (Aug 22)
- RE: Unicode worm? Deus, Attonbitus (Aug 22)
- RE: Unicode worm? Turner, Keith (Contractor) (Aug 22)
- Re: Unicode worm? pj (Aug 23)