[LINK] Rampaging bugbear

[Howard Lowndes]

On Fri, 4 Oct 2002 bscott@gtlaw.com.au wrote:

>
> In the last hour I've received 14 emails from strangers (well, I thought
> they were strangers, how come my address is in their contact list?) with
> the bugbear virus attached (some are repeats, two are in ?Polish?).
> I don't recall seeing something so virulent before.

It's like Klez, the common thread is that your address and the From:
address are in the address book of a, probably known to you but
unidentifiable, 3rd party that is infected.  That doesn't mean to say that
you know the From: address.

Watch Bugbear, it installs keypress scanners and emails trapped keypresses
out using its own email engine.  It also sets up to listen on a port so
that the machine can be accessed.

It really is a nasty, and very virulent, piece of work.  I am currently
getting about 100 warnings a day from my client's site where I have email
scanning software on their mail servers.

-- 
Howard.
LANNet Computing Associates - Your Linux people
Contact detail at http://www.lannetlinux.com
"Flatter government, not fatter government." - me
 Get rid of the Australian states.
------------------------------------------
If electricity comes from electrons, does morality come from morons?


----------
For Link list information see http://sunsite.anu.edu.au/link/