-----BEGIN PGP SIGNED MESSAGE-----
Hi folks,
FYI: There's an apparently new and utterly "stupid-ified" version
of Hybris running around that I hadn't seen previously discussed. Anyway,
the way this silly thing shows up in the Pine mailbox is enough of a clue
that it's a trojan.
1 [ No Message Text Available ]
Yup...that's it. No "From:", "To:" or "Subject:".
Full headers reveal:
Return-Path: <>
Delivered-To: jdysonat_private
Received: (qmail 3259 invoked from network); 14 Apr 2001 12:20:27 -0000
Received: from pt712073.bezeqint.net (HELO o3p7o8) (212.179.83.73)
by 208.37.215.232 with SMTP; 14 Apr 2001 12:20:27 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--VEZ0LAFGP2R05UJG9QV4XYZ01UFKP"
Content-Length: 31431
Parts/attachments:
1 Shown 1 lines Text
2 23 KB Application
- ----------------------------------------
[Part 2, Application/OCTET-STREAM (Name: "BIFGKNBI.EXE") 31KB]
[Cannot display this part. Press "V" then "S" to save in a file]
A cursory review of BIFGKNBI.EXE reveals all the Hybris
signatures. Fun.
- -Jay
( ( _______
)) )) .- "There's always time for a good cup of coffee" -. >====<--.
C|~~|C|~~| (>------ Jay D. Dyson -- jdysonat_private ------<) | = |-'
`--' `--' `---------- "Si vis pacem, para bellum." ----------' `------'
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.
iQCVAwUBOthej9CClfiU/BIVAQFfEQQAzPpWYXBk7DAcFO5pzE0kcEWRk8t1CIqy
3WU63yfVOgPri3Q5BM9fkYn+Cn/cZIp9E/0gPG0m/r0OphWxdIwc+gZTfidOPQ8w
lfPWlBfCJPLJLFwSiOigYFPqzSC5CVaS/UgYQyol8i2T3XR5f3guREwvGqdUIRug
ZeAK5w25Edg=
=IM9B
-----END PGP SIGNATURE-----
This archive was generated by hypermail 2b30 : Sat Apr 14 2001 - 14:14:20 PDT