[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <m3bruuolle.fsf@worst-case.niehaus.dynodns.net>
Date: 12 Aug 2003 19:02:37 +0200
From: Sebastian Niehaus <killedbythoughts@...dcrime.net>
To: full-disclosure@...ts.netsys.com
Cc: bugtraq@...urityfocus.com
Subject: Re: Windows Dcom Worm planned DDoS
Nick FitzGerald <nick@...us-l.demon.co.uk> writes:
> "Andrew Thomas" <andrewt@....co.za> wrote:
[...]
> And, of course, if MS started messing with the DNS entries for
> windowsupdate.com, it would be cutting an awful lot of users off from
> much needed updates. which could be as disturbing as the rest of the
> worm's effects...
Could be a nice feature of a worm to modify the "hosts" file and
prevent infected maschines to do DNS lookups.
Users typing "www.microsoft.com" into their browsers could be tricked
into downloading stuff from hostile servers and the "windows update"
could be disabeled easily.
This probably istn't a new concept, eh?
Sebastian
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Powered by blists - more mailing lists