Security Incidents mailing list archives
Re: possible new irc worm
From: "Becky" <kismet () magelair com>
Date: Fri, 27 Jun 2003 23:54:40 -0400
Yeah, I'm an admin on one of the IRC Servers, and we got our security services to ban on connect with them. Ugly worm.... lots of variations, most of them didn't have the .zip extension. Becky
Hello everybody, As of today, we started noticing spamming bots or drones on our IRC
network.
They enter channels, scan for users, exit and spam users with following messages: <kyzclvqfc> EEEEEEETHHHOOOM! MINDJAIL!! HE IS TRAPPED!! GET HIM OUT! http://61.48.32.73:3030/mindjail.zip <pwdujizao> Ever heard of a thing called mindjail? Check it: http://61.106.85.184:3030/mindjail.zip Did anybody else notice this behavior? It seems to be a new work. I
searched
on Google for "mindjail", but my search did not return anything. Thanks Zlatko Sisic Bolchat Netowrk Administrator www.bolchat.org --------------------------------------------------------------------------
--
Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training
sessions,
1,800 delegates from 30 nations including all of the top experts, from
CSO's to
"underground" security specialists. See for yourself what the buzz is
about!
Early-bird registration ends July 3. This event will sell out.
www.blackhat.com
--------------------------------------------------------------------------
--
---------------------------------------------------------------------------- Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training sessions, 1,800 delegates from 30 nations including all of the top experts, from CSO's to "underground" security specialists. See for yourself what the buzz is about! Early-bird registration ends July 3. This event will sell out. www.blackhat.com ----------------------------------------------------------------------------
Current thread:
- possible new irc worm ZSisic (Jun 27)
- Re: possible new irc worm Becky (Jun 27)
- Re: possible new irc worm rewt (Jun 27)
- Re: possible new irc worm Chris Ess (Jun 28)
- Re: possible new irc worm Paolo Monti (Jun 28)
- Re: possible new irc worm Chris Ess (Jun 28)
- Re: possible new irc worm Axel Pettinger (Jun 28)
- Re: possible new irc worm Chris Ess (Jun 29)