[Dshield] Two Arrested in Zotob Worm Probe
mwyatt at tbdsl.net
Sun Aug 28 18:58:10 GMT 2005
From: list-bounces at lists.dshield.org
[mailto:list-bounces at lists.dshield.org] On Behalf Of womber
Sent: Saturday, August 27, 2005 10:08 PM
To: General DShield Discussion List
Subject: Re: [Dshield] Two Arrested in Zotob Worm Probe
Were not arresting you for creating a worm.
We are arresting you for being extreamly stupid.
On 8/27/05, jayjwa <jayjwa at atr2.ath.cx> wrote:
> On Fri, 26 Aug 2005, Fergie (Paul Ferguson) wrote:
> -> Two men have been arrested regarding the Zotob PnP worm case.
> -> Moroccan authorities arrested "Diabl0", aka Farid Essebar and
> authorities arrested "Coder", aka Atilla Ekici. The suspects are aged
> and 21, respectively.
> -> Both nicknames can be found from the code of Zotob.A: the worm
> connected to a irc server named "diabl0.turkcoders.net" and contained
> words "Greetz to good friend Coder".
> -> Diabl0 is most likely associated with some of the Mytob variants
> Lesson #1: Never put your name in your worm/virus/irc-bot binary.
> looks for subliminal messages there.
> Lesson #2: Never have it connect back to your own server (if said
> also contains your name, see #1, above).
> (Before I get a dozen argry #3 "don't write worms" replies, to quote
> Foghorn Leghorn: "It's a joke, son.")
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see:
More information about the list