Re: Subject: [Full-Disclosure] Some suspicious files

From: dila (dila_at_myrealbox.com)
Date: 05/01/04

  • Next message: José María Mateos: "Re: [Full-Disclosure] ANNOUNCE: spam research mailing list becoming public"
    To: full-disclosure@lists.netsys.com
    Date: Sat, 01 May 2004 17:24:20 +0100
    
    

    possibly a beta version of a connect back trojan.

    seems to be able to use a website to transfer information between the
    attacker and the infected machine.

    how did you come to obtain it?

    >Hi all,
    >
    >there are so many people interested I don't wanna send each of you
    >a single mail so I'll put it to my webserver. It would be nice if
    >someone would mirror it because this "web server" is not a business
    >server, it's my own PC :)
    >
    >http://temp.gameszone.kicks-ass.net:180/temp/fd/
    >irc_files.zip, 278 KB
    >
    >Yours, Marcel
    >
    >_______________________________________________
    >Full-Disclosure - We believe in it.
    >Charter: http://lists.netsys.com/full-disclosure-charter.html

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: José María Mateos: "Re: [Full-Disclosure] ANNOUNCE: spam research mailing list becoming public"