[Dshield] MyDoom-A/B

Johannes B. Ullrich jullrich at sans.org
Sun Feb 1 14:34:19 GMT 2004


Well, mydoom a & b are now in full swing dDOS'ing sco.com and
microsoft.com respectively.

At this point, it looks like 'www.sco.com' is down, but Microsoft.com
doesn't show an impact so far.

At least Rogers appears to have changed the sco.com DNS record to
127.0.0.1. I haven't heard reports from other ISPs, but if you could
check please and let me know if your ISP is using this to reduce the
damage on its own infrastructure.



-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040201/0b7b7d59/attachment.bin


More information about the list mailing list