RE: sdbot variant and WS 55808 activity

digigal11_at_hushmail.com
Date: 06/20/03

  • Next message: Tim Greer: "Re: chkrootkit and LKM?"
    Date: Fri, 20 Jun 2003 08:57:14 -0700
    To: intrusions@incidents.org
    
    

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    More about 55808 in the news:

    http://www.theregister.co.uk/content/55/31341.html

    ISS appears to have relied on the work of Intrusec, whose public alert
    was issued first:

    http://www.intrusec.com/55808.html

    Anyone out there succeed in capturing the binary and care to share?
    -----BEGIN PGP SIGNATURE-----
    Note: This signature can be verified at https://www.hushtools.com/verify
    Version: Hush 2.3

    wkYEARECAAYFAj7zLtkACgkQKmp4+IxbTy7V1QCgsRo6ZTCpqGQoJ/vkId5C335S7wYA
    njrJa1vQ3d1kIVGrF0GJcHtG6HYl
    =SxiJ
    -----END PGP SIGNATURE-----

    Concerned about your privacy? Follow this link to get
    FREE encrypted email: https://www.hushmail.com/?l=2

    Free, ultra-private instant messaging with Hush Messenger
    https://www.hushmail.com/services.php?subloc=messenger&l=434

    Big $$$ to be made with the HushMail Affiliate Program:
    https://www.hushmail.com/about.php?subloc=affiliate&l=427

    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the
    world's premier technical IT security event! 10 tracks, 15 training sessions,
    1,800 delegates from 30 nations including all of the top experts, from CSO's to
    "underground" security specialists. See for yourself what the buzz is about!
    Early-bird registration ends July 3. This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------


  • Next message: Tim Greer: "Re: chkrootkit and LKM?"