full-disclosure - Mystery DNS Changes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <200310020923.46390.jstewart@lurhq.com>
From: jstewart at lurhq.com (Joe Stewart)
Subject: Mystery DNS Changes

On Thursday 02 October 2003 08:31 am, Randal, Phil wrote:
> NAI has this as QHosts-1, and says MS03-032 does NOT protect against
> it:

F-Secure named this trojan "Delude" days ago. NAI's QHosts-1 is just a 
variant. It is well known that MS0-032 is not 100% effective, so 
definately no one should think they are immune to this or any other 
hostile object tags just because they have that patch. Everyone running 
IE should disable active scripting if they want to avoid these little 
surprises.

-Joe

-- 
Joe Stewart, GCIH 
Senior Security Researcher
LURHQ Corporation
http://www.lurhq.com/