full-disclosure - AW: attacks shutting down windows machines?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <DF79BE12AF8DD344B107D0D03621E5750ED99F@kermit.corp.hansenet.com>
From: vogt at hansenet.com (vogt@...senet.com)
Subject: AW: attacks shutting down windows machines?

> Are they getting the windows shut down prompt? If so I would suggest
> that they aren't patched against the RPC DCOM vul and are infected or
> even if they aren't getting a prompt I think it's still 
> highly possible

Yes, it looks very much like the worm. However, someone here mentioned that
it takes about 1 min. for windos to crash (can't they do even that right? :)
).
What we are seing are very rapid reboots, at most 20 seconds.

I'll put it on the worm for now.

Tom Vogt