Re: Interesting little piece of malware...
"Chris Norton" <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
Matthew, Indeed you are correct. I was just stating that it was one way for infection. For example: Infected laptop connects to Uni. network, infected laptop then connects to IRC channel. Infected laptop gets command to spread, Uni. computers are now vulnerable. R-bot also uses weak passworded shares to spread besides other common vulnerabilities. > it would not have come across in an email We can't rule this out either as someone might have emailed what they thought was a crack but was indeed R-bot to a friend in the campus. Unlikely yes but still possible. -- Chris Norton UAT Student Software Engineering Network Defense _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions