nanog mailing list archives

mssql worm, contact info for postone.com


From: "Johannes Ullrich" <jullrich () sans org>
Date: Tue, 21 May 2002 10:15:01 -0400



The new sql worm we started covering yesterday is sending 
password lists to ixltd () postone com . Just a quick heads
up that you may want to watch stuff sent to that address.

Anybody here from Singapore? postone.com is registered to
a singapore company.

-- 
---------------------------------------------------------------
jullrich () sans org             Collaborative Intrusion Detection         
                                     join http://www.dshield.org


Current thread: