[ale] news: sobig.f -- anything yet??

[jonathan at xcorps.net (Jonathan Rickman)]

On Friday 22 August 2003 16:44, Robert L. Harris wrote:
> Nope, but if we can keep them from getting the list, that's a start.  If
> the author rushes out a new virus they may screw up and make a mistake.
> Tack on that now we know the 20 machines the authorities can likely
> secure one and disassemble it.

You missed my point. There is nothing to disassemble. Just a list of URLs. 
The payload is not necessarily at the URLs...but it can be placed there at 
the writer's discretion.

-- 
Jonathan Rickman
X Corps Security
http://www.xcorps.net


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale