RE: Increased Kuang2 activity

From: Logan F.D. Greenlee (lgreenleeat_private)
Date: Mon Feb 10 2003 - 08:46:16 PST

Next message: Johannes Ullrich: "Re: Increased Kuang2 activity"

Previous message: Patrick Fish: "Suspicious file on Desktop"
Maybe in reply to: Jason Dixon: "Increased Kuang2 activity"
Next in thread: Jason Dixon: "RE: Increased Kuang2 activity"
Next in thread: Johannes Ullrich: "Re: Increased Kuang2 activity"
Reply: Jason Dixon: "RE: Increased Kuang2 activity"
Reply: Rev. Kronovohr: "RE: Increased Kuang2 activity"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Does anyone have any information on what the kuang2 trojan does, and
what systems are vulnerable? My brief googling has only returned links
to the Trojan itself.

Thanks,
Logan

-----Original Message-----
From: Jason Dixon [mailto:jasondixonat_private] 
Sent: Sunday, February 09, 2003 7:01 PM
To: incidentsat_private
Subject: Increased Kuang2 activity

I've noticed a large increase of activity to port 17300 hitting my
firewall over the last 3 days, from various sources.  Googling relates
this port to the kuang2 trojan.  Has anyone else seen this?  Anything
else this might be attributed to?

TIA,
J.




------------------------------------------------------------------------
----
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Johannes Ullrich: "Re: Increased Kuang2 activity"
Previous message: Patrick Fish: "Suspicious file on Desktop"
Maybe in reply to: Jason Dixon: "Increased Kuang2 activity"
Next in thread: Jason Dixon: "RE: Increased Kuang2 activity"
Next in thread: Johannes Ullrich: "Re: Increased Kuang2 activity"
Reply: Jason Dixon: "RE: Increased Kuang2 activity"
Reply: Rev. Kronovohr: "RE: Increased Kuang2 activity"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Feb 10 2003 - 08:50:04 PST