According to The August 4th entry of the isc.sans.org handlers diary, there are some peculiar emails going around. They claim to be for an article claiming an explosion kills 140 in Iraq. It contains a link to a news article that has been altered from it’s original (140 instead of 14 for instance.) It also contains some nasty surprises for the visitor. There is an exploit that requires no user intervention, A cross-site scripting vulnerability (MS05-001) is exploited which runs ppp.hta from your hard drive, which creates a file called netlog.exe, which is launched by Media Player (??), which then retrieves a copy of win32sba.exe, which is the robobot backdoor.
(more…)
Tag: scripting
-
Suspicious Emails inderectly leading to virus infection
-
Windows Vista virus
I know I saw this yesterday somewhere (The Register?), but….. According to this article, proof of concept viruses have already been written for Monad, which is Microsoft’s next revision of the command shell. Now, there is some hesitance to call these viruses the first that would affect Windows Vista because it’s not known when Monad will ship (it may first ship as part of Exchange 12 server).
(more…) -
List of Open Source software Packages
The following is long, but likely not complete.
This is a list of open-source software packages: (more…)
-
Linux/Unix Bash scripted weblog
Oh my some people have time on their hands. I just found Linux, Unix, /etc/: Unix Weblog Hacks where the writer says they wanted to do a weblog, but didn’t want to go with a big blog hosting service, or have to deal with a hard to install blogging script. So their solution was to write their own weblog tool in the bash scripting language.
(more…)