Re: Update to "Code Red" Worm. Its a date bomb, not time.

From: matt sommer (mmsat_private)
Date: Thu Jul 19 2001 - 15:14:35 PDT

Next message: Marc Maiffret: "RE: Update to "Code Red" Worm. Its a date bomb, not time."

Previous message: c0ncept: "RE: Update to "Code Red" Worm. Its a date bomb, not time."
In reply to: Marc Maiffret: "Update to "Code Red" Worm. Its a date bomb, not time."
Next in thread: Marc Maiffret: "RE: Update to "Code Red" Worm. Its a date bomb, not time."
Reply: Marc Maiffret: "RE: Update to "Code Red" Worm. Its a date bomb, not time."
Reply: Blue Boar: "Re: Update to "Code Red" Worm. Its a date bomb, not time."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 19 Jul 2001, Marc Maiffret wrote:

> We made an error in our last analysis and said the worm would start
> attacking whitehouse.gov based on a certain time. In reality its based on a
> date (the 20th UTC) which is tomorrow.
>

If the worm isnt hardwired to attack 198.137.240.91 and 198.137.240.92,
its too bad the folks at www.whitehouse.gov probably arent willing to
change their IN A records to 127.0.0.1 for a few days.

-- 
Matt Sommer [MMS26], CISSP

Next message: Marc Maiffret: "RE: Update to "Code Red" Worm. Its a date bomb, not time."
Previous message: c0ncept: "RE: Update to "Code Red" Worm. Its a date bomb, not time."
In reply to: Marc Maiffret: "Update to "Code Red" Worm. Its a date bomb, not time."
Next in thread: Marc Maiffret: "RE: Update to "Code Red" Worm. Its a date bomb, not time."
Reply: Marc Maiffret: "RE: Update to "Code Red" Worm. Its a date bomb, not time."
Reply: Blue Boar: "Re: Update to "Code Red" Worm. Its a date bomb, not time."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jul 19 2001 - 15:26:04 PDT