full-disclosure - New Worm equipped with NetSniffer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040914201008.30017.qmail@web60306.mail.yahoo.com>
From: jessevalentin at yahoo.com (Jesse Valentin)
Subject: New Worm equipped with NetSniffer

Looks like another item to get excited about.. 

According to Trend Micro, there is a new worm (not out yet) called : SDBOT.UH 
This puppy is equipped with its own network sniffer to boot. As per Trend, this guy creates several threads for sniffing, keylogging and other fun stuff among which is included turning the victim pc into a TFTP server that tries to send this out to other systems. Here is the link to the Trend advisory as well as the Security Focus write up.

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SDBOT.UH&VSect=T

http://www.securityfocus.com/news/9503

Regards,

Jesse

---------------------------------
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040914/10febb85/attachment.html