RE: [Snort-users] Re: [Snort-sigs] Scan on tcp 13000

From: twig les <twigles(at)yahoo.com>
Date: Tue Feb 18 2003 - 17:27:57 EST

Incidents.org says this is the Senna Spy trojan, which led me to Google which led me to this:
http://www.megasecurity.org/trojans/s/sstrojangenerator/SSTG2002.html

Check it out for a cynical laugh. This thing claims to create trojans like the virus kits create virii. I'm actually *hoping* this is it since it's written in VB and has little GUI checkboxes for the "features" the kiddies want in their trojan, which leads me to believe that this stupid kit will not get anyone who patches/firewalls their windows boxes or doesn't run them (unintentional DoSes aside).

• "Miller, Eoin" <Miller@fhlb-of.com> wrote:
  > http://isc.incidents.org/port_details.html?port=13000
  > iQA/AwUBPlKU1DK/qMtUmsxZEQL17gCgzWi/v93DL81LxclMD2x9VHnjkdsAmgLA
  > > 45t0K3Vy/JmyJGQs0t4nvgEA
  > > =MT2n
  > > -----END PGP SIGNATURE-----
  > >
  > >
  > >
  > > -------------------------------------------------------
  

  ---

---

Know yourself and know your enemy and you will never fear defeat.

---

---

Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Tue Feb 18 17:32:04 2003