Full Disclosure mailing list archives

Heads up: Possible lsass worm in the wild

From: Feher Tamas <etomcat () freemail hu>
Date: Thu, 29 Apr 2004 15:23:30 +0200 (CEST)

Hello,

Probably the "MivSip". See:
http://www.sarc.com/avcenter/venc/data/backdoor.mipsiv.html

Symantec NAV publicly admitted it was overhyped:
http://www.computerworld.com/printthis/2004/0,4814,92732,00.html

Did you send a sample copy to AV companies?

Sincerely: Tamas Feher.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Heads up: Possible lsass worm in the wild morning_wood (Apr 29)
- Re: Heads up: Possible lsass worm in the wild insecure (Apr 29)
  - Re: Heads up: Possible lsass worm in the wild morning_wood (Apr 29)
    - Re: Heads up: Possible lsass worm in the wild Paul Tinsley (Apr 29)
- Re: [0day] Heads up: Possible lsass worm in the wild Darren Bounds (Apr 29)
- <Possible follow-ups>
- RE: Heads up: Possible lsass worm in the wild Randal, Phil (Apr 29)
- Heads up: Possible lsass worm in the wild Feher Tamas (Apr 29)
- Heads up: Possible lsass worm in the wild Feher Tamas (Apr 30)
- Heads up: Possible lsass worm in the wild Feher Tamas (Apr 30)