full-disclosure - Windows Dcom Worm planned DDoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: killedbythoughts at mindcrime.net (Sebastian Niehaus)
Subject: Windows Dcom Worm planned DDoS

Nick FitzGerald <nick@...us-l.demon.co.uk> writes:
> "Andrew Thomas" <andrewt@....co.za> wrote:

[...]

> And, of course, if MS started messing with the DNS entries for 
> windowsupdate.com, it would be cutting an awful lot of users off from 
> much needed updates. which could be as disturbing as the rest of the 
> worm's effects...

Could be a nice feature of a worm to modify the "hosts" file and
prevent infected maschines to do DNS lookups.

Users typing "www.microsoft.com" into their browsers could be tricked
into downloading stuff from hostile servers and the "windows update"
could be disabeled easily.

This probably istn't a new concept, eh?

Sebastian