Phatbot Trojan (Slashdot Article)

For people who didn't click on the description of the trojan on Slashdot.

We've been seeing the "Goodbye, have a nice infection :)" banner on
compromised computers for the past few weeks. Didn't know if was a trojan
network. We're looking at a large number of trojaned computers, probably
through DCOM or ASN.1

http://www.lurhq.com/phatbot.html

~---------------------------------~
           Allen Chang
 Lead Network Security Coordinator
  Office of Residential Computing
           UC Berkeley
~---------------------------------~

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Wed Mar 17 16:56:10 2004