Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: Sample needed - of Spybot.ZIF, which scans for vulnerable Cisco Routers - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Sample needed - of Spybot.ZIF, which scans for vulnerable Cisco Routers
According to Symantec, W32.Spybot.ZIF "allows a remote attacker" to, among other things, "Scan a specified network range for Cisco routers that may have vulnerable Telnet or HTTP servers running and report results back to IRC."

If anyone catches a sample of this one please upload it through our contact page. Thanks!
Patrick

193 Posts

Sign Up for Free or Log In to start participating in the conversation!