Full Disclosure mailing list archives
Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included)
From: Dude VanWinkle <dudevanwinkle () gmail com>
Date: Tue, 24 Jan 2006 13:52:39 -0500
On 1/24/06, Gadi Evron <ge () linuxbox org> wrote:
now known as the TISF BlackWorm task force.
Why do you call a .scr you have to manually install a "worm"? Why not "BlackVirus" the worm moniker is very misleading (actually got me worried for a sec). The "email worm" is also misleading, because it only propagates through port 25, but that is not the point of entry. The point of entry is the user running a visual basic script _willingly_. Just so I know, what would you guys classify a real worm (blaster, slammer, nimda, etc) as? Or would you just call it an "internet worm" instead of an "email worm" and leave it at that? thanks for the mis-info, -JP "still love ja tho" -JP _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) Gadi Evron (Jan 24)
- Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) Dude VanWinkle (Jan 24)
- Re: Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) Exibar (Jan 24)
- Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) Holger van Lengerich (Jan 27)
- Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) Charles Cala (Jan 28)
- Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) Dude VanWinkle (Jan 27)
- Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) Gaddis, Jeremy L. (Jan 25)
- Re: Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) Dude VanWinkle (Jan 24)