MyParty

Anderson Johnston andy at umbc.edu
Mon Jan 28 20:27:59 GMT 2002


We are getting slammed with the My Party worm.  As near as we can tell,
it's showing up in two flavors.  There is a relatively obvious one that
has the subject "new photos from my party!" and is written up at:

	http://vil.nai.com/vil/content/v_99332.htm

This afternoon we started seeing a much nastier version which appears to
be taking message excerpts from existing mail folders (subject and all),
infecting them, and then sending them out to addresses in the infected
system's address book.

Does anybody have more information on this?

					- Andy Johnston


------------------------------------------------------------------------------
** Andy Johnston (andy at umbc.edu)          *            pager: 410-678-8949  **
** Manager of IT Security                 * PGP key:(afj2000) 1024/F67035E1 **
** Office of Information Technology, UMBC *        5D 44 1E 2E A6 7C 91 7A  **
** 410-455-2583 (v)/410-455-1065 (f)      *        C4 66 5F D5 BA B9 F6 58  **
------------------------------------------------------------------------------




More information about the unisog mailing list