[Gllug] Code Red

[jim]

On Fri, 20 Jul 2001, Xander D Harkness wrote:
> I have 21 :-)

I got 64, so nyer 8-)

Nothing at all today; the worm has now gone out of "spread" mode and into
"attack www.whitehouse.gov" mode. Which has failed; the silly buggers
hardcoded an IP address and whitehouse just moved it.

A lot of the attacks are from hostnames as long as your arm under big ISPs
like @Home ... they'll be people with cable / ADSL running IIS from their
living rooms, and likely slow as hell to patch. Worm remains dormant from
the 28th onwards, starts up again in propagate mode on the 1st of next
month. By then what's the betting it'll have been recoded to use DNS for
its DDoS ...?

jim
-- 
http://madeira.physiol.ucl.ac.uk/people/jim/
"... I naturally gravitated to London, that great cesspool into which all the
 loungers and idlers of the Empire are irresistibly drained."
                                - Sir Arthur Conan Doyle, "A Study in Scarlet"


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug