multi-OS infections (was Re: A code red that could bring down the net?

From: Meritt James (meritt_jamesat_private)
Date: Mon Jul 23 2001 - 10:04:05 PDT

  • Next message: tiggerat_private: "Re: Caldera OpenUnix8 Overflows (reject, lpsystem, su)"

    I am only aware of two non-OS specific infections.  One operates at the
    hardware level and really cares very little, if at all, for what OS is
    on it (that one is sorta new.  I was suprised) and the other infected
    both Unix and  VM systems somewhat like you described.
    
    I would appreciate hearing of others!
    
    V/R
    
    Jim
    
    Jason Lewis wrote:
    
    [snip]
    
    > How about this instead?  A worm that is not only windows, but also unix
    > based.  It carries payload for each OS.  It works similar to CodeRed and
    > replicates itself.  It also installs a zombie client and creates backdoors.
    > Imagine a worm that wraps all the viruses in the 16 months into one.  What
    > if it actively searched out victims while also using Outlook to propagate
    > itself.
    
    [snip]
    
    -- 
    James W. Meritt, CISSP, CISA
    Booz, Allen & Hamilton
    phone: (410) 684-6566
    



    This archive was generated by hypermail 2b30 : Mon Jul 23 2001 - 21:15:34 PDT