full-disclosure - A worm...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1056640485.32761.43.camel@localhost.localdomain>
From: simon at snosoft.com (ATD)
Subject: A worm...

Yes, 
	And this was my point. Are the crafty "worm gods" creating worms that
evade detection by using compression and other methods?  If they are
doing this, and if they are creating the "stealth worms" whats next. Zip
files would be just one of hundreds of ways to hide worms. Maybe the
virus scanning technology needs to be kicked up a notch or two.

On Wed, 2003-06-25 at 16:32, *Hobbit* wrote:
> Maybe I'm a bit out of the loop, but this one is interesting BECAUSE
> of the .zip encapsulation.  The fact that it spreads at all is due
> to one or both of
> 
> 	.ZIP archives now auto-explode and auto-EXECUTE contents
> 	inside some MUAs
> 
> 	people are being REALLY stupid
> 
> The first one, if true, is disturbing because it used to be that
> wrapping content inside a .zip attachment is one way to get known
> bad content to colleagues and NOT have it donked by [most] content
> filters.  It should take manual, explicit action by the recipient
> to open the .zip and be careful with the contents.
> 
> Is this no longer the case?!  What idiot mail-readers have auto-
> execute-zip-contents capability, if any??  I knew this was comin'
> someday, even so...
> 
> _H*
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030626/4b906758/attachment.bin