full-disclosure - Anybody know what Sobig.F has downloaded?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <36402DCC1069D411922D00508B5B2CC21E3F2B49@ex-server1.napier.ac.uk>
From: R.Ferris at napier.ac.uk (Ferris, Robin)
Subject: Anybody know what Sobig.F has downloaded?

Old News, what most of us are waiting for is the next sobig variant that
will come out after sept 10. Some have said that it will be out on the 11th
but I think that was just the AV vendors hyping things up (read Symantec,
NAI etc ) the smaller ones are more accurate. 

For info on the 2nd part go to sophos or something like that they have
documented it quite well.

RF

-----Original Message-----
From: Brent J. Nordquist [mailto:b-nordquist@...hel.edu]
Sent: 01 September 2003 21:09
To: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Anybody know what Sobig.F has downloaded?

On Sat, 23 Aug 2003, Nick FitzGerald <nick@...us-l.demon.co.uk> wrote:

> it seems all the "contact list" machines were disconnected from the
> Internet about an hour before "come and get it" time.  One hopes this
> was done cluefully after certain important forensic evidence had been
> appropriately gathered, or at least was known to then be present on the
> machines and the machines were suitably secured for forensic analysis.

Has anyone heard anything more about that second stage; whether any of it 
was recovered, what it was supposed to be?  I can't find anyone talking 
about it; I thought this would be big news.

-- 
Brent J. Nordquist <b-nordquist@...hel.edu> N0BJN
Other contact information: http://kepler.acns.bethel.edu/~bjn/contact.html
* Fast pipe * Always on * Get out of the way - Tim Bray
http://tinyurl.com/7sti

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html