Brace yourselves.. W32/Sobig-F about to mutate...

Fri Aug 22 18:15:05 UTC 2003

If we can post here as soon as these mystery machines and\or ports are
known we can all throw up ACLs, but if the wormwriters learned from "How
to Own the Internet in Your Spare Time", by the time we throw up ACLs,
it's probably already too late.

scott

On Fri, 22 Aug 2003 Valdis.Kletnieks at vt.edu wrote:

: A quick heads up, if anybody hasn't heard:
:
: At 1900GMT today, ET phones home, and picks up the next payload of
: instructions.  Nobody knows (yet) what they'll be, but SoBig-E erased itself,
: put in a password grabber, and then installed a mail proxy for spammer use.
:
: This one *may* just play the theme song from Bozo the Clown and erase itself,
: but I severely doubt it's gonna be that nice.
:
: http://www.f-secure.com/news/items/news_2003082200.shtml
:
: