Vulnerability Development mailing list archives
Re: ICQ 2000
From: griffinb () HOTKEY NET AU (Brad Griffin)
Date: Wed, 27 Oct 1999 01:55:05 +1000
From: Sean Burford <slide () TELLURIAN COM AU> Subject: Re: ICQ 2000 It could also be a simple way of collecting the UINs of all who attempt to install the program.
There are two interesting strings in this Delphi program, possibly the ICQ user IDs are not so random. Maybe one was for testing, or was randomly picked during coding. The strings are (Lines broken for readability (note the to: line)): from=ICQ &fromemail=ICQ &subject=ICQ2000 &body=Try the newest ICQ v.2000 now!!! Available at: http://download-icq2000.hypermart.net/ &to=52249528 &Send=Send+Message from=ICQ &fromemail=ICQ &subject=ICQ2000 &body=Try the newest ICQ v.2000 now!!! Available at: http://download-icq2000.hypermart.net/ &to= &Send=Send+Message Info on the first ICQ number is at http://wwp.icq.com/52249528#info Sean
Brad Griffin Infotech undergrad & e-mail addict CQU Rockhampton, Australia Useful links: http://www.pgpi.org/ http://spamcop.net/ http://www.avp.ru/
Current thread:
- forged packets? Kelvin Fu (Oct 25)
- Re: forged packets? CyberPsychotic (Oct 24)
- Re: forged packets? Ryan Permeh (Oct 25)
- Re: forged packets? Ron DuFresne (Oct 26)
- Re: forged packets? ctor (Oct 25)
- ICQ 2000 Elias Levy (Oct 25)
- Re: ICQ 2000 Blue Boar (Oct 25)
- Re: ICQ 2000 Sean Burford (Oct 25)
- Re: ICQ 2000 Brad Griffin (Oct 26)
- Re: ICQ 2000 Blue Boar (Oct 25)
- icq2000 Brad Griffin (Oct 26)
- Re: ICQ 2000 Damm, Mike (Oct 26)
- Re: ICQ 2000 Brad Griffin (Oct 26)
- FreeBSD listen() 3APA3A (Oct 27)
- Re: FreeBSD listen() CyberPsychotic (Oct 27)
- Re: FreeBSD listen() 3APA3A (Oct 29)
- Re: FreeBSD listen() Matthew S. Hallacy (Oct 30)
- Fw: Trojan/Worm on one of your pages and spams ICQ users. BrainMaster (Oct 28)
- Re: FreeBSD listen() David Schwartz (Oct 28)
- Re: FreeBSD listen() 3APA3A (Oct 29)