Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Storming into April on Fools Day - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Storming into April on Fools Day

Well, it's that time again. April Fools day tomorrow and prime time for those in control of the Storm botnet.  Again a various list of subjects come with this release:

All Fools' Day
Doh! All's Fool.
Doh! April's Fool.
Gotcha!
Gotcha! All Fool!
Gotcha! April Fool!
Happy All Fool's Day.
Happy All Fools Day!
Happy All Fools!
Happy April Fool's Day.
Happy April Fools Day!
Happy Fools Day!
I am a Fool for your Love
Join the Laugh-A-Lot!
Just You
One who is sportively imposed upon by others on the first day of April
Surprise!
Surprise! The joke's on you.
Today You Can Officially Act Foolish
Today's Joke!

The download is a binary, also with varying names:

foolsday.exe
funny.exe
kickme.exe

Virus coverage is poor with the samples we've captured, but we're working with the AV vendors to improve that.

Steve Hall

Stephen

89 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!