Ok, I must have missed that discussion, I've done some searches on the web
for it and haven't come up with anything. Anyone give any ideas as to how
you can detect this on your machines?
Matt
On Wed, Dec 15, 1999 at 04:50:05PM -0500, Michael H. Warfield wrote:
> On Wed, Dec 15, 1999 at 04:07:49PM -0500, [EMAIL PROTECTED] wrote:
>
> > Ok, I have to say I've never seen this one in the typical Hoax "alerts"
> > people pass around, I'm not sure how these programs can "lie dormant until
> > activated" (sure crontab, but it'd be pretty obvious somethings up..)
> > anyone confirm this is a hoax?
>
> This is one I can confirm - is NOT a hoax.
>
> Tribe Flood Network and trin00 are very real. They've been
> discussed recently on BugTraq and there have been annoucements and
> analysis on the ISS alert mailing list. What the realistic level of
> threat is, I don't know.
>
> > >>>>
> >
> > Malicious programs lie in wait, FBI warns
> > By Bruce V. Bigelow
> > STAFF WRITER
> > Union-Tribune Publishing Co.
> > December 15, 1999
> >
> > The FBI's nerve center for cyberspace crimes has warned that outlaw hackers
> > may use a new class of malicious software to cripple Internet operations
> > and
> > other computer networks on New Year's Eve.
>
> [...]
>
> > Dormant danger
> > The malicious programs -- including ones dubbed "trinoo" and "Tribe Flood
> > Network" -- typically lie dormant until activated. Once activated, however,
> > the program orchestrates a coordinated attack -- commanding legions of
> > machines to transmit a flood of computerized data to a particular system.
> > "It's like puting something into a computer and then issuing a command that
> > says, 'Lazarus come forth!' " said Gene Schultz, a network security expert
> > at
> > SAIC's Global Integrity Corp.
>
> [...]
>
> Mike
> --
> Michael H. Warfield | (770) 985-6132 | [EMAIL PROTECTED]
> (The Mad Wizard) | (770) 331-2437 | http://www.wittsend.com/mhw/
> NIC whois: MHW9 | An optimist believes we live in the best of all
> PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
>
--
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
