RE: Unicode worm?

From: Deus, Attonbitus (Thor@HammerofGod.com)
Date: 08/22/02


Date: Thu, 22 Aug 2002 08:56:44 -0700
To: "Larsen, Colin" <colin.larsen@nz.unisys.com>, "'incidents@securityfocus.com'" <incidents@securityfocus.com>
From: "Deus, Attonbitus" <Thor@HammerofGod.com>


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 09:26 PM 8/21/2002, Larsen, Colin wrote:
>I get this every day. Usually in batches of 8 to 16 probes. Mostly from
>China, Korea (even 2 nights of a couple of hundred probes from an Asian IT
>university!)I figure its a fact of life that anything attached to the big
>wide world is gonna get shot at.

These could very well be different boxes gathering reconnaissance
information. The old "pre-built attack map for a surgical strike" kind of
thing.

Ya never know.

AD

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQA/AwUBPWUJvIhsmyD15h5gEQITzwCfe+muMXtTJW21wlMaWFp0cBq1SnYAniwY
1z9OD3psZd2MIIcnotyAjl2U
=oLYr
-----END PGP SIGNATURE-----

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com