full-disclosure - new linux malware

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <0ced01c63514$c12b0d40$0100a8c0@nuclearwinter>
Date: Sun Feb 19 05:23:30 2006
From: fd at g-0.org (GroundZero Security)
Subject: new linux malware

you said you are not quiet sure what this is and posted
those strings which clearly are from an old irc bot with
DoS functionality

----- Original Message ----- 
From: "Gadi Evron" <ge@...uxbox.org>
To: "GroundZero Security" <fd@....org>
Cc: <full-disclosure@...ts.grok.org.uk>
Sent: Sunday, February 19, 2006 5:46 AM
Subject: Re: [Full-disclosure] new linux malware


> GroundZero Security wrote:
> > oh my god this is a stone old DoS irc bot.
> > you can find the source on packetstorm :P
> > its by no means "new" maybe it has been modified 
> > by some kid that changed the printf()'s, but this is
> > no news at all.
> > 
> 
> Wrong. The first part is the regular PHP worms we see for a while now. 
> Take a second look if you do have the sample.
> 
> Gadi.
> 
> -- 
> http://blogs.securiteam.com/
> 
> "Out of the box is where I live".
> -- Cara "Starbuck" Thrace, Battlestar Galactica.
>