OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Per Kangru (perkangru.org)
Date: Tue Feb 13 2001 - 20:30:43 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    It works for me as well...

    I guess that we are talking of a quite interesting way of interrupting
    the service for this e-biz site. I't would be interesting to see
    wether they are aware of the oncoming DDOS?

    /Per

    -------------------
    > Staym mentioned it worked for him, as well. Perhaps the site just
    dislikes
    > me.
    >
    > -----Original Message-----
    > From: Derek Atkins [mailto:warlordMIT.EDU]
    > Sent: Tuesday, February 13, 2001 3:10 PM
    > To: Andrew Jenks
    > Cc: 'staymaccessdata.com'; coderpunkstoad.com
    > Subject: Re: anna virus
    >
    >
    > It worked for me yesterday, after I "decrypted" the virus.
    >
    > -derek
    >
    > Andrew Jenks <ajenksmicrosoft.com> writes:
    >
    > > Probably irrelevant -- www.dytnabyte.nl, the page they've linked
    to,
    > brings
    > > up a 404 in my browser. I was working under the idea that they'll
    pu t a
    > > little "we've got you" message up there before then.
    > >
    > > I'll award them +2 points for the execute statement on the
    decrypted code,
    > > but these things are getting less and less creative.
    > >
    > > > -----Original Message-----
    > > > From: staymaccessdata.com [mailto:staymaccessdata.com]
    > > > Sent: Tuesday, February 13, 2001 9:19 AM
    > > > To: coderpunkstoad.com
    > > > Subject: anna virus
    > > >
    > > >
    > > > The virus is a simple vb script made with a virus creation
    > > > kit. There's
    > > > an obfuscated part that creates a registry key and if the date
    is Feb
    > > > 26, opens the homepage of dynabyte.nl.
    > > >
    > > > Looks like it was designed to be a distributed denial of
    > > > service attack
    > > > against their website. Any bets on what the population of the
    virus
    > > > will be on the 26th?
    > > > --
    > > > Mike Stay
    > > > Programmer / Crypto guy
    > > > AccessData Corp.
    > > > staymaccessdata.com
    > > >
    >
    > --
    > Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
    > Member, MIT Student Information Processing Board (SIPB)
    > URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH
    > warlordMIT.EDU PGP key available
    >

    Per Kangru, Telecom AE
    Agilent Technologies
    per_kangruagilent.com +46-706-888766 (work)
    perkangru.org +46-707-545556 (private)