[Dshield] [Re: Sobig.f surprise attack today]

Shawn Cox shawn.cox at pcca.com
Fri Aug 22 20:12:18 GMT 2003


What I don't understand about both Blaster and SoBig.F is why the writer(s)
waitied so long to launch the second phase attacks.  Both Blaster and SoBig
waited a week to launch phase 2 which gave the white hats more than enough
time to analyze and prevent the phase 2 attacks.  The best time to have
launched phase 2 would have been hours after phase 1 not days...

--S





More information about the list mailing list