[Full-disclosure] Virus Outbreak Attacking MS05-039 WIN2K

[Jan Nielsen]

Perhaps the next phase of the virus is a phishing attack to get people
to go to a local webserver initiated by the virus to capture
login/credentials from those site ?
 
Jan
 
-----Original Message-----
From: Andrew Smith [mailto:andrew.rse at gmail.com] 
Sent: 15. august 2005 17:27
To: Mike
Cc: full-disclosure at lists.grok.org.uk
Subject: Re: [Full-disclosure] Virus Outbreak Attacking MS05-039 WIN2K
 
Can anyone explain why this virus chooses to block ebay, amazon and
paypal?
This seems foolish if the intention is to remain on the compromised host
un-noticed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050815/13eab338/attachment.html