full-disclosure - Virus infections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Nov 24 02:40:20 2005
From: mail at hackingspirits.com (Debasis Mohanty)
Subject: Virus infections

This sober *FBI/CIA* variant seems to have strike back with the intention to
make *news* which it failed to make when it was originally released first
time in the month of Feb (2005). I encountered it in the month of Feb and
since there were no AV advisories around, I reverse engg it to find out the
'payload' but there were no destructive payload and it was just a mass
mailler. A reverse analysis report can be downloaded from the following link
- 
http://www.hackingspirits.com/eth-hac/papers/Fake-FBI-Worm-Analysis.zip

- T (aka D) 

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of pingywon
Sent: Thursday, November 24, 2005 12:34 AM
To: Geo.; full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Virus infections

yes indeed this Sober virus is ramping up pretty quick.

Alot of my clients have called me today asking about emails they have
received.

Here is all the latest info on it.

http://vil.mcafeesecurity.com/vil/content/v_137072.htm

~pingywon MCSE