possible new irc worm

From: ZSisic (ZSisicat_private)
Date: Fri Jun 27 2003 - 12:44:23 PDT

  • Next message: Becky: "Re: possible new irc worm"

    Hello everybody,
    
    As of today, we started noticing spamming bots or drones on our IRC network.
    They enter channels, scan for users, exit and spam users with following
    messages:
    
    <kyzclvqfc> EEEEEEETHHHOOOM! MINDJAIL!! HE IS TRAPPED!! GET HIM OUT!
    http://61.48.32.73:3030/mindjail.zip
    
     
    
    <pwdujizao> Ever heard of a thing called mindjail? Check it:
    http://61.106.85.184:3030/mindjail.zip
    
     
    
    Did anybody else notice this behavior? It seems to be a new work. I searched
    on Google for "mindjail", but my search did not return anything.
    
     
    
    Thanks
    
     
    
    Zlatko Sisic
    
    Bolchat Netowrk Administrator
    
    www.bolchat.org
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Jun 27 2003 - 20:48:01 PDT