RE: Increased Kuang2 activity
The recent rise of scans could be linked to an automated version
of a tool similar to this :
http://www.tlsecurity.net/Incoming/Backdoor/Kuang2updater.html
Quote :
You can paste a list of kaung2 compromised hosts and it will
automatically connect and upload your whatever you choose
to the infected hosts.
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
Received on Mon Feb 10 22:58:19 2003
This archive was generated by hypermail 2.1.8
: Wed Aug 23 2006 - 14:01:58 EDT
|