Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: Sample needed - of Spybot.ZIF, which scans for vulnerable Cisco Routers SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Sample needed - of Spybot.ZIF, which scans for vulnerable Cisco Routers
According to Symantec, W32.Spybot.ZIF "allows a remote attacker" to, among other things, "Scan a specified network range for Cisco routers that may have vulnerable Telnet or HTTP servers running and report results back to IRC."

If anyone catches a sample of this one please upload it through our contact page. Thanks!
Patrick

193 Posts
Nov 2nd 2005

Sign Up for Free or Log In to start participating in the conversation!