[Dshield] port 1026-1031 update

Bruyere, Michel mbruyere at ezemcanada.com
Wed Dec 3 20:33:57 GMT 2003


I always found weird peoples or companies trying to sell you spam solution
by spamming you, as same as trying to sell you a pop-up blocker by sending
you them... Is it just me or....


M. Bruyere



> -----Original Message-----
> From: Bill McCarty [mailto:bmccarty at pt-net.net]
> Sent: mercredi 3 décembre 2003 14:06
> To: General DShield Discussion List
> Subject: Re: [Dshield] port 1026-1031 update
> 
> Hi Bjorn,
> 
> --On Wednesday, December 03, 2003 10:04 AM -0700 Bjorn Stromberg
> <bjorn at thechemistrylab.com> wrote:
> 
> We concur: There doesn't seem to be anything malicious behind the
> obfuscation on the web page. However, I continue to suspect that the
> offered download is malicious. I know of one group that's working to
> reverse engineer it. So, perhaps we'll soon know.
> 
> If the download also proves to be benign, I'll fall back on my conjecture
> that the related traffic was scanning for vulnerable hosts, with a
> malicious payload yet to come. I find it hard to believe that there'd be
> this much fuss merely to deliver a pop-up spam blocker.
> 
> Cheers,
> 
> ---------------------------------------------------
> Bill McCarty
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list