[Dshield] Looks like Sobig-F is going to mess up TGIF

Joshua Thornburg dshield at quackpot.com
Fri Aug 22 16:00:58 GMT 2003


This looks real bad...

http://www.f-secure.com/news/items/news_2003082200.shtml


"The worm connects to one of these 20 servers and authenticates itself with
a secret 8-byte code. The servers respond with a web address. Infected
machines download a program from this address – and run it. At this moment
it is completely unknown what this mystery program will do."


-qP




More information about the list mailing list