Slashdot Mirror
Schneier on Attack Trends: More Complex Worms
Gary W. Longsine writes "Bruce Schneier has posted an interesting entry on
expected attack trends to his blog. Of particular interest is the increasing sophistication of automated worm-based attacks. He cites the developing
W32.spybot.KEG
worm -- once inside a network it scans for several vulnerabilities and reports its findings via IRC.
Trend Micro also has information on a scanning-capable version of this worm, which they call: WORM_SPYBOT.ID"
Nice to see the industries stock thumper is still #1 for attracting worms and looks to be still #1 in the future. Upon sighting wormsign one only need look closeby for a compromised IIS box.
Hedley
This is all I could think of when reading this.
"...we've got a KEG... of worms... and phytoplankton"
Question everything that you've accepted without thinking.
The first is stupid users.
Sorry BOFH wannabe, they're not stupid users, they're just users.
If they aren't doing what you would like, you obviously have a training deficiency which might be your fault, not theirs.
How can you possibly secure a network against attacks if your users are constantly undermining your lockdown efforts?
By undermining their efforts. And if they try to undermine your undermining of their undermining, simply undermine their undermining of your undermining of their undermining. It's really quite simple.
Indy Media Watch-Proctologist of the Internet
What are these people gaining anyway?
Chicks.
... that to all itents and purposes it looks like an Operating System. It will give the use a limited amount of funciontality in order to maintain it's cover. Secretly it will report back to its maker about what you do on your computer and... Oh, wait a minute...
from the article:"We have started seeing criminal extortion over the Internet: hackers with networks of hacked machines threatening to launch DoS attacks against companies. Most of these attacks are against fringe industries -- online gambling, online computer gaming, online pornography -- and against offshore networks."
While mainstream web services are cringing in anticipation of becoming targets, it is quit amusing to watch what seems to be one kind of filth devouring another.
Stay sentient. Don't drink bad milk.
"By undermining their efforts. And if they try to undermine your undermining of their undermining, simply undermine their undermining of your undermining of their undermining. It's really quite simple."
I don't know where I heard this but...
"You can never make anything idiot proof because idiots are so damned ingenious"
evil is as evil does
Besides they make viruses?
What do they care about infringing on a trademark?!
Z3r0C001: Hey what do you think about the name "I Be Malicious" for the name of our new virus?
|<rash0v3rr|d3: Hmm, the initials of that spell I.B.M., we could be in for a lengthy legal battle.
Z3r0C001: You're right, legalities aside, it would at least be unethical to use a name that shortens to another companies name, especially seeing as both of our products are in the computing realm.
|<rash0v3rr|d3: Indeed, lets forget the virus and forget our troubles with a big bowl of strawberry icecream.
Z3r0C001: w00t
The fact that you were able to install a personal firewall on your machine indicates to me that it may be quite a while before your admins figure out what nailed them...
-Ben