Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Visualization of Dasher worm

Published: 2005-12-17
Last Updated: 2005-12-17 05:14:59 UTC
by Kyle Haugsness (Version: 2)
0 comment(s)
The honeynet folks sent us a link to their research on the MSDTC exploit that is attacking TCP port 1025 (the Dasher worms).  This is very interesting stuff, especially if you like statistical analysis:

UPDATE: the bandwidth for has been exceeded.  Does anyone have a mirror to offer?

0 comment(s)

Hotmail and MSN problems

Published: 2005-12-16
Last Updated: 2005-12-16 17:59:21 UTC
by Kyle Haugsness (Version: 1)
0 comment(s)
Looks like Hotmail and MSN are having problems receiving mail from specific Internet Service Provider networks.  They are blaming the problem on high mail volume, partly due to the Sober worm.  More information here:

0 comment(s)
Diary Archives