RE: Increased Kuang2 activity

[Thierry Zoller <support () sniff-em com>]

The recent rise of scans could be linked to an automated version
of a tool similar to this : 
http://www.tlsecurity.net/Incoming/Backdoor/Kuang2updater.html

Quote : 
You can paste a list of kaung2 compromised hosts and it will 
automatically connect and upload your whatever you choose
to the infected hosts.



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com