----- Original Message ----- From: "Ed Koshland" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, June 05, 2003 3:34 PM Subject: FW: [SECURITY] bugbear variant
> > FYI > > -----Original Message----- > From: The EDUCAUSE Security Discussion Group Listserv > [mailto:[EMAIL PROTECTED] On Behalf Of Theresa M Rowe > Sent: Thursday, June 05, 2003 3:16 PM > To: [EMAIL PROTECTED] > Subject: Re: [SECURITY] bugbear variant > > We have been hit hard with this today. > It is particularly ugly. We have Sophos at the gateway, and > Norton Corporate Edition at the desktop, and the variant hit > before either had an anti-virus definition available. We got > definitions from Sophos at 11:30 AM and Norton at 1:30 PM. > We are now doing the clean-up. > > While the virus seems to be stopped, it leaves behind > hooker.trojan in keystroke capturing mode, and that is > proving extremely difficult to clean-up. > Theresa Rowe > > > > > ---- Original message ---- > >Date: Thu, 5 Jun 2003 14:43:55 -0500 > >From: "Bruhn, Mark S." <[EMAIL PROTECTED]> > >Subject: [SECURITY] bugbear variant > >To: [EMAIL PROTECTED] > > > >I received a phone call a short while ago from DHS, > indicating that a > >new variant of Bugbear was spreading, mostly among financial > >institutions. That's all they told me. We haven't received > reports of > >infections here at IU yet. > > > >But, information about it can be found at > >http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] > tml, or > >probably also at your favorite AV vendor site . > > > >M. > > > >-- > >Mark S. Bruhn, CISSP > > > >Chief IT Security and Policy Officer > >Interim Director, Research and Educational Networking > Information > >Sharing and Analysis Center ([EMAIL PROTECTED]) > > > >Office of the Vice President for Information Technology and > CIO > >Indiana University > >812-855-0326 > > > >Incidents involving IU IT resources: [EMAIL PROTECTED] > >Complaints/kudos about OVPIT/UITS services: [EMAIL PROTECTED] > > > >********** > >Participation and subscription information for this EDUCAUSE > Discussion Group discussion list can be found at > http://www.educause.edu/memdir/cg/. > Theresa Rowe > Assistant Vice President > University Technology Services > www.oakland.edu/uts - the latest news from University Technology > Services > > ********** > Participation and subscription information for this EDUCAUSE Discussion > Group discussion list can be found at > http://www.educause.edu/memdir/cg/. >
