Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: [Full-disclosure] New Variant of the Storm Virus
From: eflorio (eflorioedmaster.it)
Date: Wed Feb 28 2007 - 14:58:47 CST
The web-component of the new StormWorm variant is distributed by the following domains:
They all resolve to 220.127.116.11 at the moment.
The remote page could be "funvideo.html", "clip.html" or "winner.html".
More info here:
----- Original Message -----
full-disclosurelists.grok.org.uk, 'WASC Forum'
Sent: Wed, 28 Feb 2007 21:40:49
Subject: [Full-disclosure] New Variant of the Storm Virus
> Was just reading an article about a new variant or what is believe to be a
> varient of the Storm Virus and am trying to find out more information about
> it in order to put appropriate IP/Domain blocks and counter messures in
> Specifically I am looking to determing the Domain(s)and IP address to block
> as well as possible obtaining a copy of the code to reverse engineer.
> If anyone has more information on this I would appreciate the feedback.
> Article of interest:
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/