Code Red seems to be back.

2001-09-18 Thread Bill Stewart
Seems like Code Red or one of its little friends is back. I think breaking up Microsoft is a bad idea, but there are days it would be nice to have their Web Server and Email Worm-Propagators run by companies other than the operating system company just so fewer people would be running that

Re: Code Red seems to be back.

2001-09-18 Thread Adam Shostack
On Tue, Sep 18, 2001 at 09:49:30AM -0700, Bill Stewart wrote: | Somebody did a paper about a hypothetical Andy Warhol Virus, | studying how long it takes to take over a server, | how many servers you can attack per minute, and | what it would take to coordinate an attack that really hit

Re: Code Red seems to be back.

2001-09-18 Thread David Honig
At 09:49 AM 9/18/01 -0700, Bill Stewart wrote: Seems like Code Red or one of its little friends is back. This one supposedly uses both http servers and email (MS of course) to propogate. Even read that visiting an infected web site can cause client infection, but we'll have to await the

Re: Code Red seems to be back.

2001-09-18 Thread John Young
The worm hit Cryptome at 8:43 AM EST and is now sucking at a rate of about 90% of the load. As others have noted, the bulk of the hits appear to be coming from our own ISP, either by design or by spoofing the origin. Our server is on Apache but the worm generates endless errors attempting to find