Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
Re: Mimail.C (Denial of Service Attack)
From: K-OTiK Security (Special-Alertsk-otik.com)
Date: Fri Oct 31 2003 - 17:06:03 CST
it seems that this worm attempts to launch a Denial of Service Attack by sending a large amount of data to known servers (port 80 / ICMP). The worm verifies that a connection is active by contacting google.com, then the DoS is launched against "darkprofits" domains (marketing operation ?)
Due to an increased rate of submissions Symantec Security Response has upgraded W32.Mimail.Cmm to a Category 3 threat from a Category 2 threat.
K-OTik Staff /// http://www.k-otik.com
>From: Alan <alan.tennenty3kgroup.com>
>The irritation has begun :/
>A new version of Mimail.C has cropped up. It spoofs the recipients domain and sends the mail as 'james<spoofed domain>' and has an attachment: pictures.jpg.exe
>Some clients have reported massive amounts of lag due to its mass mailing and one client's firewall dropped as a result, although this might not be related.
>More info can be found on:
>Antigen pics the attachment up as I-Worm.WatchNet
>Keep an eye out and inform your users