bugtraq - Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 10 Feb 2004 11:12:11 +0200
From: Gadi Evron <ge@...uxbox.org>
To: bugtraq@...urityfocus.com
Subject: Re: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser)

> They all have it as a low-incidence in the wild. What I don't understand is that if it
> hasn't spread, what caused the attack against Microsoft this morning?

A worm that spreads this way can't become huge for obvious reasons, but 
it still spreads, thus the DDoS against MS.

There is a some (naming) confusion in the different vendor web pages 
about this worm, but the interesting part is that Mydoom.A's source code 
is included.

	Gadi