'Twas the night before Christmas, when all through the house Not a creature was stirring, not even a mouse.
Last Updated: 2006-12-24 23:38:22 UTC
by Mark Hofman (Version: 1)
Maybe no mice, but if the internet is on, plenty of things are flowing.
First, reports of a few million break and enter in
On a packet note:
Robert reported that a friend downloaded a Battlefield cheat which proceeded to infect his system. We'll be having a look at that one.
Gordon has reported that he is seeing some packets with flags (CWR ECE) set, going towards webmin ports. There was a new release back on the 28th of November, but currently no reported vulnerabilities.
Port 8555 and 2967 activity has tapered off (for the moment). This specific instance we were looking at looks like a variation of the SAV activity of recent weeks. If your corporate AV is not yet up to date (that is software, not just patterns) then you may still be vulnerable. The timing of this was exquisite, just the few days of the year on which corporate types would be on the net and checking emails, finishing off that last report etc.
Spam in AU has tapered off a little as well over the last day or two. One or two readers have reported similar results in their region. Everybody probably has already bought their, medicine, extensions, reductions, software and penny stock for the year. Maybe with the January sales it will start ramping up again.
Happy holidays to all from the ISC