Re: [Full-Disclosure] Culprit Bio: Perfect Storm Averted or Just Ahead?

From: David (ph1_at_cogeco.ca)
Date: 01/29/04

  • Next message: Eric Knight: "Re: [Full-Disclosure] Culprit Bio: Perfect Storm Averted or Just Ahead?" 
    To: Peter <peter@icebear.net>
Date: Thu, 29 Jan 2004 15:48:52 -0500

    Peter wrote:

    >If I can believe the virus researchers www.microsoft.com is not going to be
    >a target..
    >
    >MyDoom.B apperntly enters into you hosts file along with a lot of others
    >www.microsft.com with address 0.0.0.0
    >I think a DoS sending http GET requests to www.microsfot.com from that
    >machine is probably not going to reach microsoft.
    >
    >

    It was mentioned somewhere (I think f-secure) that it will remove
    certain entries before it starts the attack.

    http://f-secure.com/v-descs/mydoom_b.shtml

    "An additional line is added before the the date when attack against
    Microsoft begins:

    0.0.0.0 www.microsoft.com

    Which will make the site unaccessible. The 3rd of February the entry
    will be removed so the attack can be performed, which will probably
    cause some difficulties reaching it, if the DDoS is successful."

    >Peter
    >
    >
    >
    >-----Original Message-----
    >From: full-disclosure-admin@lists.netsys.com
    >[mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of Jos Osborne
    >Sent: donderdag 29 januari 2004 17:05
    >To: full-disclosure@lists.netsys.com
    >Subject: RE: [Full-Disclosure] Culprit Bio: Perfect Storm Averted or Just
    >Ahead?
    >
    >It's just SCO trying to gather publicity from the whole situation.
    >
    >"Oh, look at us - we're under attack by an evil virus."
    >
    >What's the bets they try to blame the open source community? Especially with
    >Microsoft also being the target for MyDoom.B
    >
    >Jos
    >
    >
    >-----Original Message-----
    >From: Feher Tamas [mailto:etomcat@freemail.hu]
    >Sent: 29 January 2004 15:45
    >To: full-disclosure@lists.netsys.com
    >Subject: [Full-Disclosure] Culprit Bio: Perfect Storm Averted or Just Ahead?
    >
    >
    >
    >
    >>Anyone with MyDoom author info, a reward is posted.
    >>
    >>
    >
    >No honest person would take those 30 silver coins from SCO.
    >
    >_______________________________________________
    >Full-Disclosure - We believe in it.
    >Charter: http://lists.netsys.com/full-disclosure-charter.html
    >
    >
    >_______________________________________________
    >Full-Disclosure - We believe in it.
    >Charter: http://lists.netsys.com/full-disclosure-charter.html
    >
    >
    >

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Eric Knight: "Re: [Full-Disclosure] Culprit Bio: Perfect Storm Averted or Just Ahead?"

    Relevant Pages

    • Re: TCP/IP ports for MyDoom?
      ... There won't BE any hits on your corporate firewalls relating to the attack ... corporate firewall is most likely to identify such incoming as something ... to the DDoS attacks on either SCO or Microsoft, ...
      (comp.security.firewalls)
    • Re: TCP/IP ports for MyDoom?
      ... > the attack against SCO or Microsoft (unless your ISP has decided ... > URLs and isolate any LAN clients generating an exorbitant amount ...
      (comp.security.firewalls)
    • Linux ou Microsoft: qui tient dune religion?
      ... il était clair que Microsoft et Linux avaient des buts diamétralement opposés. ... ayant recours à tous les coups bas possibles, Microsoft est devenue une horreur digne des films futuristes d épouvante. ... SCO - Linux - Microsoft connection? ...
      (soc.culture.quebec)
    • Risks Digest 25.17
      ... Firmware-based phone vulnerabilities ... A Low-cost Attack on a Microsoft CAPTCHA (Jeff Yan and Ahmad Salah El Ahmad ... An iTunes file database problem Apple will never fix ...
      (comp.risks)
    • Re: Fallout from the SCO suits
      ... Once SCO is gone, it's very likely that MS will buy ... > and wouldn't switch to Linux anyway. ... some will switch to Microsoft. ...
      (comp.unix.sco.misc)