Re: new linux malware

[Gadi Evron <ge () linuxbox org>]

GroundZero Security wrote:
> oh my god this is a stone old DoS irc bot.
> you can find the source on packetstorm :P
> its by no means "new" maybe it has been modified 
> by some kid that changed the printf()'s, but this is
> no news at all.

Wrong. The first part is the regular PHP worms we see for a while now. 
Take a second look if you do have the sample.

        Gadi.

--
http://blogs.securiteam.com/

"Out of the box is where I live".
        -- Cara "Starbuck" Thrace, Battlestar Galactica.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/