"Storm Botnet Is Behind Two New Attacks" (slashdot)

[Paul Vixie <paul () vix com>]

"We've gotten a number of submissions about the new tricks the massive Storm
botnet has been up to. Estimates of the size of this botnet range from 250K-1M
to 5M-10M compromised machines. Reader cottagetrees notes a writeup at Exploit
Prevention Labs on a new social engineering attack involving YouTube. The
emails, which may be targeted at people who use private domain registrations,
warn the recipient that their "face is all over 'net" on a YouTube video. The
link is to a Storm-infected bot that attacks using the Q4Rollup exploit (a
package of about a dozen encrypted exploits). And reader thefickler writes
that the recent wave of "confirmation spam" is also due to Storm, as was the
earlier, months-long "e-card from a friend" series of attack emails."

http://it.slashdot.org/article.pl?sid=07/08/26/1558245
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.