Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Brace yourselves.. W32/Sobig-F about to mutate...

  • From: Stephen J. Wilcox
  • Date: Fri Aug 22 14:20:06 2003


On Fri, 22 Aug 2003 Valdis.Kletnieks@vt.edu wrote:

> A quick heads up, if anybody hasn't heard:
> 
> At 1900GMT today, ET phones home, and picks up the next payload of
> instructions.  Nobody knows (yet) what they'll be, but SoBig-E erased itself,
> put in a password grabber, and then installed a mail proxy for spammer use.

"On this moment, the worm starts to connect to machines found from an encrypted 
list hidden in the virus body. The list contains the address of 20 computers 
located in USA, Canada and South Korea."

erm so why dont we just block (preferably bgp null route) these sites?






Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.