Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: [Fwd: Re: sober.z to hit tomorrow]

  • From: Wil Schultz
  • Date: Fri Jan 06 11:04:38 2006


And here i was expecting .ZIP file from the FBI and CIA telling me that I need to full out a "survey" :)

-Wil

Martin Hannigan wrote:

Here is some more interesting information. I'm not positive this is Sober.Z related but it's walking like and talking like a duck.

First I see the below DNS requests, shortly after I see many SMTP packets hitting Hotmail, AOL, Yahoo.com, Yahoo.co.uk, Progegy, etc.... Looks like it's... Sending SPAM?!?!

No! Not that!


This I didn't expect at all, here is a trace from one of the known infected users:


This is how these folks make money.







Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.