full-disclosure - [Fwd: Re: Increase probe on UDP port 1026]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <3FCE62C1.4050007@popsikle.net>
From: InCisT at popsikle.net (InCisT)
Subject: [Fwd: Re: Increase probe on UDP port 1026]

Brian Eckman wrote:
> (I am responding on behalf of myself, not Paul. I thought it might 
> benefit the list to include a little more info, and I'm not sure if he 
> was planning on replying.)
> 
> Nick FitzGerald wrote:
> 
>> Paul Dokas <dokas@...umn.edu> replied to Nicob:
>>
>>
>>>> I captured some packets and it appears to be (only) a Windows Messenger
>>>> "spam" for a "penis enlargement" product.
>>>
>>>
[snip]

"Support.com" sends out packets to this port. Most of "Support.com"
installs are done by users who click yes and get some malware installed
for them.

InCisT