Re: NIMDA - ceased ? -
From: Roger Thompson (rogert@mindspring.com)
Date: 12/28/02
- Previous message: Kevin Reardon: "Re: RPAT - Realtime Proxy Abuse Triangulation"
- Maybe in reply to: Tomo: "NIMDA - ceased ? -"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 27 Dec 2002 18:47:47 -0500 To: incidents@securityfocus.com From: Roger Thompson <rogert@mindspring.com>
At 02:00 AM 12/26/2002 +0900, you wrote:
>Hi, all.
>
>Is NIMDA ...(GET /scripts/..%252f../winnt/system32 ...something)
>ceased ?
>04:54, Dec. 23 UTC is the last access of them, around here.
>
>Any comments ?
No, it hasn't ceased, but the overall activity is down. See...
www.wormwatch.org
and
www.wormwatch.org/images/WCMthly.html
Roger
Regards
Roger Thompson
Technical Director of Malicious Code Research
TruSecure Corporation
www.trusecure.com
www.wormwatch.org
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
- Next message: Rob Shein: "RE: RPAT - Realtime Proxy Abuse Triangulation"
- Previous message: Kevin Reardon: "Re: RPAT - Realtime Proxy Abuse Triangulation"
- Maybe in reply to: Tomo: "NIMDA - ceased ? -"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
