[iwar] Why - No mass attacks seen yet...


From: MAGLAN 1
From: m1@maglan-lab.com
To: iwar@egroups.com
Wed, 3 Jan 2001 22:51:48 +0200 

fc  Wed Jan  3 12:53:07 2001
Received: from 207.222.214.225
	by localhost with POP3 (fetchmail-5.1.0)
	for fc@localhost (single-drop); Wed, 03 Jan 2001 12:53:07 -0800 (PST)
Received: by multi33.netcomi.com for fc
 (with Netcom Interactive pop3d (v1.21.1 1998/05/07) Wed Jan  3 20:48:58 2001)
X-From_: m1@maglan-lab.com  Wed Jan  3 14:48:03 2001
Received: from ml.egroups.com (ml.egroups.com [208.50.144.77]) by multi33.netcomi.com (8.8.5/8.7.4) with SMTP id OAA15103 for ; Wed, 3 Jan 2001 14:48:01 -0600
X-eGroups-Return: sentto-279987-879-978555124-fc=all.net@returns.onelist.com
Received: from [10.1.4.53] by ml.egroups.com with NNFMP; 03 Jan 2001 20:52:05 -0000
X-Sender: m1@maglan-lab.com
X-Apparently-To: iwar@egroups.com
Received: (EGP: mail-6_3_1_3); 3 Jan 2001 20:52:04 -0000
Received: (qmail 39204 invoked from network); 3 Jan 2001 20:52:03 -0000
Received: from unknown (10.1.10.26) by l7.egroups.com with QMQP; 3 Jan 2001 20:52:03 -0000
Received: from unknown (HELO odin.inter.net.il) (192.114.186.10) by mta1 with SMTP; 3 Jan 2001 20:52:02 -0000
Received: from fox ([192.116.242.226]) by odin.inter.net.il (Mirapoint) with SMTP id AIN02991; Wed, 3 Jan 2001 22:51:57 +0200 (IST)
Message-ID: <008401c075c6$fe146de0$0100000a@fox>
To: 
References:  <3.0.5.32.20010101134525.030f7e80@pop.fuse.net> <3.0.5.32.20010101214615.033d6640@pop.fuse.net>
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
From: "MAGLAN 1" 
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe: 
Date: Wed, 3 Jan 2001 22:51:48 +0200
Reply-To: iwar@egroups.com
Subject: [iwar] Why - No mass attacks seen yet...
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit


Today (January 3, 2001), the Israeli Police, seized for investigation four
Israelis, blamed for planning an enormous 'Christmas-Mass-Attacks' against
US targets (!). The operation coordinates with the FBI. Few detailed were
delivering today for publication:
- Broad cooperation illustrated between the Israeli and the American digital
underground.
- The Israeli police found at one of the suspect's home many attack tools,
few were defines "sophisticated".
- Apparently all members of the Israeli digital underground are under 18
years old.

------------------------------ :)
MAGLAN - Information Warfare Research Lab.


----- Original Message -----
From: David Kennedy CISSP 
To: 
Sent: Tuesday, January 02, 2001 4:46 AM
Subject: Re: [iwar] No mass attacks seen yet...


> -----BEGIN PGP SIGNED MESSAGE-----
>
> At 05:11 PM 1/1/01 +0200, MAGLAN 1 wrote:
> >Except the night of the 30th (Dec. 30, 2000) when 81 Israelis web
> >site were defaced (up to now almost 100 !).
> >Mass? - At least for the 'Israeli proportions'
>
> At 09:33 PM 1/1/01 +0200, MAGLAN 1 wrote:
> >Per the message - Confirmed by whom and how ... Just few :
> >1. The official Israeli News channel ('Koal Israel' = the Vice of
> >Israel). 2. Israeli Tec news 'Sivan.com', 'Walla.co.il'.
> >3. MAGLAN monitoring systems.
> >4. As was written by Mr. DeLong before see at
> >http://www.attrition.org.
>
> http://www.attrition.org/mirror/attrition/2000/12/29/www.yehud.co.il/
>                                           ^^^^^^^^^^
>
> Then both the reported date and the characterization as a mass attack
> are imprecise.  A single server was the victim of a single attack,
> presumably by a single person or small group, that it hosted multiple
> domains is remarkable, it is certainly no cause for alarm by anyone
> other than the victim(s) and is not indicative of widespread (mass)
> attacks.
>
> Compare this one server to the results achieved by others, for
> example IHA versus various educational domains, in the last several
> days, or McM4nus vs banks over the last several weeks.
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Personal Privacy 6.5.8
> Comment: How long has it been since you backed up your hard drive?
>
> iQCVAwUBOlFA8fGfiIQsciJtAQH7OgQAhupJua3jIeRAm5EKhH3BwfjaElTboP8X
> nzwYX7f9ZErksuilfR3Fu6sTNxeLl7lisglgSocMuA+Xfxyvi6IljLu1fCrOq647
> B0pFj1aRKnPRr3O3CgOcE4qQGjlbN3kxCcAr0ErmDTJ4BE/4vkoo0c0llkFrCAvo
> wNFgD4riBik=
> =vbim
> -----END PGP SIGNATURE-----
>
> --
> Regards,
>
> David Kennedy CISSP
> Director of Research Services, TruSecure Corp. http://www.trusecure.com
> Protect what you connect.
> Look both ways before crossing the Net.
>
> ------------------
> http://all.net/
>
>


------------------
http://all.net/