[ISN] Dutch hackers claim authorship of Code Red II

From: InfoSec News (isnat_private)
Date: Wed Aug 08 2001 - 01:35:41 PDT

  • Next message: InfoSec News: "[ISN] Using the Fluhrer, Mantin, and Shamir Attack to Break WEP"

    WEDNESDAY, AUGUST 08, 2001
    BONN: Computer hackers in the Netherlands have claimed authourship of
    a second version of the malicious Internet virus Code Red, Germany's
    Federal Office for Information Technology Security said on Tuesday.
    Hackers of the Dutch group 29a claim in news group discussions to have
    put this version of the so-called worm-type virus into circulation,
    but there was no proof that they were the originators, the German
    body's expert, Frank Felzmann, said.
    "This kind of claim can also serve to cover up the tracks," he said.
    Felzmann added that "the snowball-like propagation of the virus on the
    Internet makes it all the more difficult to trace back a path to it
    Speculation that the first version of Code Red came from China has
    been discarded, Felzmann also said, despite of the fact that infected
    web pages may contain the words "Hacked by Chinese."
    The virus, which has been spreading since last week, exploits a
    vulnerability in IIS servers using the Microsoft Windows NT and
    Windows 2000 operating systems. Microsoft has provided a patch which
    eliminates the vulnerability.
    ISN is currently hosted by Attrition.org
    To unsubscribe email majordomoat_private with 'unsubscribe isn' in the BODY
    of the mail.

    This archive was generated by hypermail 2b30 : Wed Aug 08 2001 - 04:07:36 PDT