full-disclosure - SV: Ms Update Spoof - W32.gibe

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: kruse at krusesecurity.dk (Peter Kruse)
Subject: SV: Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED

Hi,

Why is this allowed to travel the list in the first place?  Where's the
moderator? 

I suppose it's okay to include sourcecode and POC's, but IMHO it should
not be allowed to attach binaries to a open mailinglist especially when
it's malware. 

The analysis might be useful to some people, I don't know, but certainly
not the compiled code and certainly not as an attachment. 

Med venlig hilsen // Kind regards

Peter Kruse
Kruse Security
http://www.krusesecurity.dk