[Dshield] PhatBot

Paul Marsh pmarsh at nmefdn.org
Thu Mar 18 21:19:52 GMT 2004


Well this is a happy picture the Washington Post painted.

"Phatbot Trojan Spreading To More Systems Than Code Red A veritable
Swiss Army Knife of attack tools is disabling antivirus tools, stealing
passwords, connecting systems to peer-to-peer networks and setting the
victim systems up to send spam and DDoS traffic."

What's the word on the inside about this nasty thing?
LURGQ's write up is good http://www.lurhq.com/phatbot.html but it
doesn't really give any pointers as to what we should be on the look out
for.

Thanx, Paul




More information about the list mailing list