Another trojan using WMF exploit in SPAM



F-Secure is reporting on another SPAM attack that tries to get people to click on a link to a site with an exploit-crafted WMF file. The message is along the lines of a claimed Professor at Yale announcing the unfortunate vandalism over the New Year holiday, the link purports to be pictures of the act in the “hope that someone may recognize the culprits work”. I’m sure this won’t be the last of that sort….


Administrators: you might want to block these at your gateways:
http access to playtimepiano[dot]home[dot]comcast[dot]net (do not visit this site)
tftp (ie. UDP) access to 86.135.149.130
IRC access to 140.198.35.85:8080
IRC access to 24.116.12.59:8080
IRC access to 140.198.165.185:8080
IRC access to 129.93.51.80:8080
IRC access to 70.136.88.76:8080

Related Posts

Blog Traffic Exchange Related Posts
  • Network security - how safe is your network? Looking at ARP A while back I did a network security series and one of the points that I mentioned was that it's important to know what is normal for your network. In other words, what machines are NORMALLY connected, what services are normally running, etc. Well, I'm about to start a serious......
  • The 2nd journey begins… Mandriva 2006 upgrade 2 - Part 8 Ok - tv card - no name brand is now working... it was a bttv compatible card but it's always been "strange" for lack of a better word. NOTHING under linux has seemed to correctly detect it. Sometimes I have seen it given the following settings... bttv card=72 tuner=2, but......
  • Microsoft Outlook - duplicate email messages Part II This is part II, click here for part one of the saga... Okay, so I revisit to install Microsoft Office 2003 SP2 and hope that solves it. Somewhere along this time, I had also found a suggestion of removing the entire mail PROFILE and creating a new one. *(The theory......
Blog Traffic Exchange Related Websites
  • New Loan Funded — Finance for an ESTABLISHED Business — $25,000 at 24% — B Credit — DTI 1392557% A new loan funded (Finance for an ESTABLISHED Business – $25,000 at 24%).  I participated via a manual bid the loan was Autofunding.  The borrower had B credit and a 1392557% DTI (unverifiable income).  As a reminder my standing orders (and manual bids) only find loans with 0 current delinquencies, 10 or less delinquencies......
  • Weight Tracking (Last Attempt) Total Weight Lost: 58lbs Here is my weight tracking page... It will evolve as I get more accustomed to my new lifestyle, but for starters if you want to know about the Jumpstart Medicine weight loss program that I am following read this post WeightLadder Reset — 390lbs and Starting......
  • 5 Reasons to Throw Away Your 401K I've been doing a lot of thinking about 401K's lately. Almost every financial professional screams from the top of his/her lungs that it's a great deal. If your company offers matching funds it's probably a great idea to take advantage of that. If you are like me and your company......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site