Security Incidents mailing list archives

RE: Increased Kuang2 activity


From: Jason Dixon <jasondixon () myrealbox com>
Date: 10 Feb 2003 11:57:24 -0500

http://www.glocksoft.com/trojan_list/Kuang2.htm

-J.

On Mon, 2003-02-10 at 11:46, Logan F.D. Greenlee wrote:
Does anyone have any information on what the kuang2 trojan does, and
what systems are vulnerable? My brief googling has only returned links
to the Trojan itself.

Thanks,
Logan

-----Original Message-----
From: Jason Dixon [mailto:jasondixon () myrealbox com] 
Sent: Sunday, February 09, 2003 7:01 PM
To: incidents () securityfocus com
Subject: Increased Kuang2 activity

I've noticed a large increase of activity to port 17300 hitting my
firewall over the last 3 days, from various sources.  Googling relates
this port to the kuang2 trojan.  Has anyone else seen this?  Anything
else this might be attributed to?

TIA,
J.




------------------------------------------------------------------------
----
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com






----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: