Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Bot with Veritas; Internet crash in Pakistan; MS Security Bulletin Scam; MS05-017 Exploit - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Bot with Veritas; Internet crash in Pakistan; MS Security Bulletin Scam; MS05-017 Exploit

Net Bot with Veritas Exploit




One of our reader report that new BOT variant try to exploit the new Veritas vulnerability. The bot infected system start scanning tcp/10000 for further infection. The miscreants start adapt new Veritas vulnerability other variants BOT.



Internet crash in Pakistan





The Reuters report Pakistan has problem with Internet access and Telecommunication. Following the Reuter, the undersea calbe link has problem due to the power supply. You will find more information at following link.
http://www.cnn.com/2005/WORLD/asiapcf/06/28/pakistan.internet.reut/index.html

If anyone have more information, please report to ISC.



MS Security Bulletin Scam





Following the one of our reader, the
the new email scam disguised as Microsft Security Bulletins. Users receive an email message which urges the immediate installation of a MS cumulative security patch. If user executes the file, use will be infected new BOT variant. If anyone have more information, please report to ISC.



MS05-017 Exploit



The published new exploit for vulnerability. The MS05-017 is vulnerability in Message Queuing, the remote attacker can execute command from remote. It's time to patch and filter some unnecessary port.





Kevin Hong

Handler on Duty

khong-at-kisa.or.kr
 Handlers

76 Posts
Jun 28th 2005
Thread locked Subscribe Jun 28th 2005
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!