OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: slim bones (slimIO.COM)
Date: Wed Jan 17 2001 - 13:38:06 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Jan 17, 2001 at 06:14:13PM +0100, Bernhard Rosenkraenzer wrote:
    > Considering he's also replacing index.html files with nonsense, it's most
    > likely part of a denial of service attack, intentionally closing anonftp.

    Howdy,

    Unless Ramen is somebody's proof-of-concept code, I think the index.html
    bit is why the worm was written. It's an automatic web site defacer,
    however bland that may be. Defacing all index.html files on the victim
    appears to be the only action the worm takes that isn't related to
    propogation.

    my $.02,
    s.b