Slashdot Mirror
Evaman Worm Attacks Email Servers
An anonymous reader writes "CoolTechZone is reporting that the mail servers of various popular email services such as Hotmail and Yahoo to be bogged down with a new worm, code-named Evaman.
The headings are common to the ones users encounter everyday in their inbox - "Failed Transaction" or "Delivery Failure". This worm has the potential to take control over Windows 95, 98, ME, 2000, XP, NT, and Windows Server 2003."
This would be the windows catastrophie of the week huh?
Can someone please, please, please write a decent Unix worm so we can get some interesting headlines?
And don't tell me it's just because MS is a bigger target. Linux runs between 35%-40% of the worlds servers (and more than that if your only counting the DMZd webservers). It's the code stupid.
I would rather be ashes than dust!
Many people are like that. One day, my landlady thought I had missed a payment. She called me and when I told her I just checked using the online interface to my bank account that the payment was really made, she asked me to print a copy of the receipts as "proof". Simply the date of the transfer was not enough for some reason.
It took me quite a while to explain to her that I could save the html ("But surely you can't edit the web pages of your bank, can you?"), type in anything I wanted to, print it and send it to her. After I went through all this trouble to explain how I could cheat her, she seemed to assume I was telling the truth and that I did pay it.
Donate free food here
It's kinda sad though that you've been infected by the time you managed to download the security update...
I've got an idea - Microsoft can start letting the magazines ship the patches on cover CDs again... or even better - they should be legally required to ship a CD containing the patches to every registered user.
http://blog.nexusuk.org
..well im not so sure about that since a DoS is a form of attack.
Consider the following situation:
1- one user logs into his mail server and naively executes britneynaked.gif.exe and starts spreading the worm to all of his contacts.
2- now, if all users that receive the worm do the same thing, the serve will start to bog his way down.
3- Some users will not be able to connect to the server since it is to busy processing millions of worms going back and forth.
4- The server has ben attacked.
All worms are potentially dangerous to servers!
What is best in life? To crush your enemies, to see them driven before you and to hear the lamentations of their women.
The security advisory then lists a dozen or so popular multi-stage relays, from some major ISPs. This explains why my system was being hit by Verizon servers over a thousand times this weekend, targeting a non-existant address.
And here I thought it was just their normal "ignore the 550 response code, just retry endlessly" configuration! Turns out, it was just their "Relay anything for anyone" configuration!