funsec mailing list archives

Beware: Chinese Police Plan to Allow Hacker to Release 'Fix' for Worm?


From: "Fergie" <fergdawg () netzero net>
Date: Wed, 14 Feb 2007 19:48:54 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bizarre.

And beware anything that purports to be a "fix" for a worm. :-)

Via ComputerWorld.

[snip]

A hacker arrested only days ago will be allowed to release a fix for the
worm that he helped write, China's state media reported today.

Li Jun, one of six people recently arrested by provincial police for
creating, then selling, the worm known as Panda Burning Joss Stick and
Fujacks, has written a seek-and-destroy program that will eradicate the
worm, said the government's official Xinhua News Agency.

Xinhua also reported that Li confessed yesterday to writing the worm "for
fun" and selling it to several people for nearly $13,000. The Panda worm,
which has spread widely throughout China, steals online game usernames and
passwords.

Police in central China's Hubei Province said that after additional
testing, the unnamed killer program will be posted to the Internet.
According to Ye Tieguan, vice director of the Xiantao police bureau, Li's
program eliminates the Panda worm.

[snip]

More:
http://www.computerworld.com/action/article.do?command=viewArticleBasic&art
icleId=9011263

Xinhua:
http://news.xinhuanet.com/english/2007-02/14/content_5739792.htm

Background:
http://fergdawg.blogspot.com/2007/02/china-8-arrests-in-computer-virus-case
.html

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFF02eiq1pz9mNUZTMRAo+uAJ91PEn70LN98Luc2sTVuNWqP4hd7gCgttWg
qc9cYPg0VplTZhLEspARXOQ=
=MlEZ
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: