[Esd-l] ARRGGHH!! (SoBig tidal wave)

John D. Hardin jhardin at impsec.org
Tue Aug 19 22:10:08 PDT 2003


There is some speculation that the recent explosion of SoBig worms is
from spammers trying to "recruit" new home computers to be relays
because MS Blaster caused so many people to patch and AV scan their
systems and thus closed a lot of their hijacked-for-relay personal
systems...

100+ quarantine notices in my personal mailbox just today. The graph
from my work is at:

    http://boundary.aproposretail.com/~johnh/quarantine.html

Death to spammers!

Updated SoBig.F local rule due tomorrow.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                              -- www.darwinawards.com
-----------------------------------------------------------------------
   74 days until Matrix Revolutions



More information about the esd-l mailing list