full-disclosure - Merry Christmas worm (Zafi.D) is spreading now. Beware!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <200412152144.iBFLittu015769@turing-police.cc.vt.edu>
From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Merry Christmas worm (Zafi.D) is spreading now.
	Beware! 

On Tue, 14 Dec 2004 10:49:48 +0100, Feher Tamas said:
> An apparently brands new "D" version of the ZAFI worm, with
> "Merry Christmas!" subject and animated fucking smiley icons
> on the inside is spreading Postcard.HTML.blahblah.. dot
> ZIP/CMD files.

*yawn* Somebody hit "rewind" on the remote control, will ya?

"OK Sherman, set the wayback machine for December 1987....."
"Yes, Mr Peabody.."
<fwizz>

*
             * 
           ****
         ********
       ************
     ****************           A
         ********
       ************             VERY
     **************** 
   ********************         HAPPY
        ***********
      ***************           CHRISTMAS
    *******************
  ***********************       AND MY
      ***************
    *******************         BEST WHISHES
  ***********************
***************************     FOR THE NEXT
           ******
           ******               YEAR
           ******

/* browsing this file is no fun at all just type CHRISTMAS from cms */


*9 December 1987* CHRISTMA EXEC is released on BITNET. The program written in 
the REXX scripting language common to IBM Mainframes of the day is a small 
christmas card with a built in trojan horse. When executed it reads through the 
address book and sends copies to all your friends. The trojan horse managed to 
spread to the IBM internal network VNET through the BITNET-VNET gateway as 
well, causing even more massive grief on that network. IBM develops the first 
"mail scanner" code to look for and destroy the program on the VNET network. 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20041215/990cb7fc/attachment.bin