Bugbear.B worm

BugBear.B backdoor is listening on this port. SPDX-FileCopyrightText: 2003 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bugbear worm

BugBear backdoor is listening on this port. SPDX-FileCopyrightText: 2005 Michel Arboi & Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bugbear worm

BugBear backdoor is listening on this port. A cracker may connect to it to retrieve secret information, e.g. passwords or credit card numbers... The BugBear worm includes a key logger and can kill antivirus or personal firewall softwares. It propagates itself through email and open Windows shares...

Trojan various hidden technology full range of large-disclosure-vulnerability warning-the black bar safety net

Previously, I had thought that as long as not casually run user made to the file will not be in a virus or Trojan, but it later emerged that exploit the propagation of shock waves, shock wave;previously, I had think that not on the small site would not be in the pages of the Trojan, but later...

TFTP Backdoor Detection

A TFTP server is running on this port. However, while trying to fetch a random file, we got an executable file. Many worms are known to propagate through TFTP. This is probably a backdoor. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18263; scriptversion "$Revision:...

Bugbear Worm Detection

The BugBear backdoor is listening on this port. An attacker may connect to it to retrieve secret information such as passwords, credit card numbers, etc. The BugBear worm includes a keylogger and can kill antivirus and firewall software. It propagates through email and open Windows shares...

HELP.dropper: IE6, OE6, Outlook...lookOut

Thursday, 28 March, 2002 Silent delivery and installation of an executable on a target computer. No client input other than opening an email or newsgroup post or web site. This can be accomplished with the default installation of Internet Explorer 6.0, Outlook Express 6.0 and probably Outlook and...

melissa.macro.virus.txt

Date: Fri, 26 Mar 1999 17:05:51 -0800 From: Aleph One To: [email protected] Subject: Melissa Macro Virus I normally don't allow virus posts through the list as they seldom represent a new threat, just a new example of an already existing one, but this one is getting enough play to warrant a...

worm.explore.zip.analysis.txt

Date: Thu, 10 Jun 1999 22:30:25 -0500 From: Simple Nomad To: [email protected] Subject: Info on Worm.ExploreZip Info on Worm.ExploreZip: I'm in the process of cleanup - my day job employer got hit, and we're NT with no 95/98 to speak of. Here are some interesting tidbits that I haven't seen on...

Threats Making WAVs - Incident Response to a Cryptomining Attack

Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report includes the full attack vectors, from detection, infection, network propagation and malware analysis and recommendations for optimizing incident...