[Dshield] Looks like Sobig-F is going to mess up TGIF

Joshua Thornburg dshield at quackpot.com
Fri Aug 22 16:00:58 GMT 2003

This looks real bad...


"The worm connects to one of these 20 servers and authenticates itself with
a secret 8-byte code. The servers respond with a web address. Infected
machines download a program from this address – and run it. At this moment
it is completely unknown what this mystery program will do."


More information about the list mailing list