full-disclosure - [yusufg@...blaze.com: Re: Possible source of worm..]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20030127055321.C2830@netsys.com>
From: len at netsys.com (Len Rose)
Subject: [yusufg@...blaze.com: Re: Possible source of worm..]

----- Forwarded message from Yusuf Goolamabbas <yusufg@...blaze.com> -----

Delivered-To: nanog-outgoing@...pdoor.merit.edu
Delivered-To: nanog@...pdoor.merit.edu
Delivered-To: nanog@...og.org
Date: Mon, 27 Jan 2003 18:48:19 +0800
From: Yusuf Goolamabbas <yusufg@...blaze.com>
To: nanog@...og.org
Subject: Re: Possible source of worm..
In-Reply-To: <20030127050913.B2830@...sys.com>
User-Agent: Mutt/1.4i
X-AntiVirus: checked by Vexira MailArmor (version: 2.0.1.6; VAE: 6.17.0.2; VDF: 6.17.0.19; host: corpmail.outblaze.com)
Precedence: bulk
Errors-To: owner-nanog-outgoing@...it.edu
X-Loop: nanog

> According to the South China Morning Post: http://www.scmp.com 
> 
> "Roy Ko Wai-tak of the Hong Kong Computer Response Team says his team
> is tracing the source of the Sapphire worm, which is believed to have
> come from Asia, maybe even Hong Kong." - Ricky Chang
> 
> I can't get access to the news article, seemingly you have to have
> premium access.
> 
> 

I have access to this article, some interesting paragraphs 

<quote>
The Washington Post reported on Sunday US experts and FBI's National
Infrastructure Protection Centre had found the worm contained references
in its code to the Honker group, a Chinese hacker group believed to be
active on the mainland and possibly Hong Kong.

However, most experts agree it is easy to hide identities and the
references might have been put in there to mislead investigators.

The Honker Union of China, a group of self-styled patriotic Chinese, has
claimed responsibility for an attack on the White House's official Web
site and hundreds of US government and company portals and Web pages
since 2001.

It has been denounced by the Chinese government for worsening Sino-US
relations. No one from the Honker group has been identified or arrested
so far. 
</endquote>

-- 
Yusuf Goolamabbas
yusufg@...blaze.com

----- End forwarded message -----