Re: [Full-disclosure] new worm traveling the net? (GNU/Linux)

2007-02-20 Thread Przemyslaw Frasunek
Timo Schoeler napisaƂ(a): a friend of mine contacted me because he saw lots of emails (60) to [EMAIL PROTECTED] starting at about 5:00 am (US east coast time). Indeed, I've started receiving it yesterday at 10:00 am (CET) and it stopped at 08:00 pm. To: header contained [EMAIL PROTECTED] and

[Full-disclosure] new worm traveling the net? (GNU/Linux)

2007-02-19 Thread Timo Schoeler
ahoy, a friend of mine contacted me because he saw lots of emails (60) to [EMAIL PROTECTED] starting at about 5:00 am (US east coast time). so i checked our company's log files (about 300 users) and saw the same here starting at about 10:45am CET, ending at about 6pm, and about 40 emails of this

Re: [Full-disclosure] new worm traveling the net? (GNU/Linux)

2007-02-19 Thread Michal Zalewski
On Mon, 19 Feb 2007, Timo Schoeler wrote: [EMAIL PROTECTED] [...] is this a new worm spreading or something already known? More like a spambot probe of some sorts. http://groups.google.com/groups?hl=enq=catchthismail ___ Full-Disclosure - We

Re: [Full-disclosure] new worm traveling the net? (GNU/Linux)

2007-02-19 Thread Timo Schoeler
In epistula a Michal Zalewski [EMAIL PROTECTED] die horaque Mon, 19 Feb 2007 22:17:43 +0100 (CET): On Mon, 19 Feb 2007, Timo Schoeler wrote: [EMAIL PROTECTED] [...] is this a new worm spreading or something already known? More like a spambot probe of some sorts.

Re: [Full-disclosure] new worm traveling the net? (GNU/Linux)

2007-02-19 Thread Timo Schoeler
In epistula a Michal Zalewski [EMAIL PROTECTED] die horaque Mon, 19 Feb 2007 22:17:43 +0100 (CET): On Mon, 19 Feb 2007, Timo Schoeler wrote: [EMAIL PROTECTED] [...] is this a new worm spreading or something already known? More like a spambot probe of some sorts.