Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: MS08-067 Worm in the wild? - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
MS08-067 Worm in the wild?

We have received a report of a wild MS08-067 worm.

Reference: http://www.f-secure.com/weblog/archives/00001526.html

Reported file size 16,384 bytes:

http://www.threatexpert.com/report.aspx?uid=919a973d-9fe1-4196-b202-731ebaaffa5d

Kaspersky Lab detect the new wave as
Exploit.Win32.MS08-067.g

and Microsoft as
Exploit:Win32/MS08067.gen!A

Sophos uses name Mal/Generic-A.

Much thanks to Juha-Matti for sending us an email.

-- Joel Esler http://www.joelesler.net

 Joel

454 Posts
Nov 3rd 2008
Thread locked Subscribe Nov 3rd 2008
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!