[ale] sobig.f -- anything yet??

[Brian J. Dowd]

If it's just one master server left available now, then that would mean 
it, alone, must address a "start"
message to all of the known "slaves" which have previsouly been 
compromised by SoBig.F.

They will probably be told the target IP address and the DOS attack time 
in a *subsequent* message.
It could be a while yet before we know what they were told to do and how 
many of them can do it.

-Brian

>Nothing on the news, nothing on F-Secure...it's distressingly quiet with
>potentially one 'master server' left running to deliver whatever it is
>that sobig wants...
>
>Anybody heard/seen anything?  I can't believe we're lucky enough for it to
>have crapped out at this stage...
>
>jenn
>
>
>_______________________________________________
>Ale mailing list
>Ale at ale.org
>http://www.ale.org/mailman/listinfo/ale
>
>  
>


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale