| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <690771006.1061585173@[192.168.2.119]> From: pauls at utdallas.edu (Paul Schmehl) Subject: Sobig has a surprise... --On Friday, August 22, 2003 1:27 PM -0600 Jonathan Grotegut <jgrotegut@...ectpointe.com> wrote: > > Anyone able to verify this with another site (eeye, any other antivirus > firm)? > I can verify this. I wrote a snort rule that looks for outgoing packets to 8998/UDP and I saw machines hitting 20 unique IPs on that port. So I can confirm that it is true. Paul Schmehl (pauls@...allas.edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu
Powered by blists - more mailing lists