Saturday, September 27, 2003

InfoWorld: Worms sent via IM pose serious, growing threat: September 26, 2003: By : Security: "Virulent new worms that exploit vulnerable instant messaging (IM) clients and could infect hundreds of thousands of computers in seconds are a real threat for Internet users worldwide, according to security researchers from Symantec. "
Usually I think that Symantec is blowing smoke, but I think this one is set to be the next big worm generators. Though I do not like the IM companies closing down their programs and forcing me to have one for each one, I see where they need to.
The ability of hackers to grab a user's buddy list also gives IM worms the potential to be more virulent than predecessors like Code Red, Slammer or Blaster, which spread over the Internet rather than over IM networks, Chien said.

Unlike those worms, IM worms do not need to scan the Internet for the IP (Internet Protocol) addresses of vulnerable systems to infect, a process that greatly slows the spread of traditional worms. Instead, IM worms simply use the infected user's buddy list to find new targets.

Even with a scenario in which the buddy lists of infected and target machines were identical except for just one IM user, an IM worm could infect 500,000 machines in just 31 seconds, Chien and Hindocha showed.

Scary!
InfoWorld: Juvenile arrested for creating Blaster variant: September 26, 2003: By : Security: "Another person has been arrested in relation to the Blaster worm that infected computers worldwide last month. This time the individual is a juvenile, prosecutors in Seattle said Friday, which in the U.S. typically means under the age of 18."
Glad to see this is being taken more and more seriously by law enforcement.

Friday, September 26, 2003

Donuts With Dad - You know sometimes it is the little things that make a difference to a child. For two weeks Annie has been reminding me that today was Donuts with Dad day at school. It was not much, just donuts and either juice or milk. Annie and Israel were accompanied by me, their daddy. They loved it, and it was nice to see other daddies taking part in their children's life. What was sad was the amount of kids with no dad there, or making excuses why their dad/father figure could not be there. I had 2 hrs sleep at most, and a minor crisis at work that I got woke up to take care of, but you know what, my kids are important.
It made me think of a blog entry I saw where a person who is about to have a kid asked people what to look for in day care. One person replied, well, why have a kid if you are not going to take care of them and enjoy them. You do not have children to give them to someone else to raise.
New Virsues to look out for:
W32/Randex-G in wild not wide spread.
nntp//rss
I have just started playing with this and the jury is still out for me about it. Anyone out there had expereince with it and want to talk about it to me. drbobm at yahoo dot com

Thursday, September 25, 2003

New Viruses listings
troj_delsha.d Risk - low
bkdoor_ciadoor.a Risk: low
bat_womaniz.d Risk: low
irc_womaniz.d Risk: low
bkdr_womaniz.d Risk: low
Above 3 are tied together
w97m_goodday.a risk: low. personal note: it could be something to look for if you have older versions of Word
troj_mimail.b risk: low
worm_mimail.b risk:low (cannot self propergate)
html_mimail.gen risk: low
Above 3 appear to be related
Keep your signatures up to date folks.

Wednesday, September 24, 2003

New Virus Information
Troj_madtol.a risk:low
Bkdr_Delf.cv risk:low
Keep the signature databes up to date.

Monday, September 22, 2003

Oklahoma highway blocked by 800 baby pigs: "OKLAHOMA CITY, Sep. 22 - Interstate 40, the main east-west highway in Oklahoma, was closed for several hours Thursday when about 800 baby pigs spilled on to the road after the truck transporting them overturned, police said Friday. "
Talk about clogged arteries.....(sorry could not resist).