Re: [Full-Disclosure] 45% of the free files collected via KaZaA contained malware

From: Mary Landesman (mlande_at_bellsouth.net)
Date: 01/09/04

  • Next message: j tole: "[Full-Disclosure] Small vulnerability in Canadian Pay Pal Secret Question" 
    To: "Bernardo Quintero" <bernardo@hispasec.com>, <bhughes@icsalabs.com>
Date: Fri, 9 Jan 2004 13:17:33 -0500

    Hmmm... Interesting stuff. I also noted the report says "The number of
    viruses exploiting known vulnerabilities to infect or spread grew from 36 to
    50 in 2003" and notes that 28 of these exploit MS01-020. My research, which
    I thought was incomplete, shows 160 viruses exploiting known
    vulnerabilities, 54 of which exploit MS01-020.

    So much for statistics. :-)

    Regards,
    Mary Landesman
    Antivirus About.com Guide
    http://antivirus.about.com

    ----- Original Message -----
    From: "Bernardo Quintero" <bernardo@hispasec.com>
    To: <bhughes@icsalabs.com>
    Cc: <full-disclosure@lists.netsys.com>
    Sent: Thursday, January 08, 2004 11:11 AM
    Subject: [Full-Disclosure] 45% of the free files collected via KaZaA
    contained malware

    Dear Hughes
    <<<<<
    http://www.truesecure.com/company/press/pr_20031229.shtml
    For example, according to new research conducted by Hughes, 45% of the free
    files
    collected via KaZaA, the most popular program for downloading free files and
    music, were
    viruses, Trojan horse programs and backdoors.

    wp_2004Virus.pdf:
    According to new research, fully 45% of the free files collected via KaZaA,
    the mos
    popular program for downloading free files and music, contained virus,
    Trojan horse
    programas, or backdoors.

    >>>>>

    Exists documentation of the research?
    Can you comment something to me on the used methodology?

    Best regards,
    Bernardo Quintero
    bernardo@hispasec.com

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: j tole: "[Full-Disclosure] Small vulnerability in Canadian Pay Pal Secret Question"