[iwar] [fc:Israeli.Youths.Confess.to.Writing.'Goner'.Internet.Worm]

From: Fred Cohen (fc@all.net)
Date: 2001-12-09 20:30:24


Return-Path: <sentto-279987-4036-1007958603-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Sun, 09 Dec 2001 20:31:08 -0800 (PST)
Received: (qmail 28168 invoked by uid 510); 10 Dec 2001 04:30:24 -0000
Received: from n16.groups.yahoo.com (216.115.96.66) by all.net with SMTP; 10 Dec 2001 04:30:24 -0000
X-eGroups-Return: sentto-279987-4036-1007958603-fc=all.net@returns.groups.yahoo.com
Received: from [216.115.97.187] by n16.groups.yahoo.com with NNFMP; 10 Dec 2001 04:29:31 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_1_2); 10 Dec 2001 04:30:02 -0000
Received: (qmail 41109 invoked from network); 10 Dec 2001 04:30:02 -0000
Received: from unknown (216.115.97.172) by m6.grp.snv.yahoo.com with QMQP; 10 Dec 2001 04:30:02 -0000
Received: from unknown (HELO red.all.net) (12.232.125.69) by mta2.grp.snv.yahoo.com with SMTP; 10 Dec 2001 04:30:02 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id fBA4UP708841 for iwar@onelist.com; Sun, 9 Dec 2001 20:30:25 -0800
Message-Id: <200112100430.fBA4UP708841@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Sun, 9 Dec 2001 20:30:24 -0800 (PST)
Subject: [iwar] [fc:Israeli.Youths.Confess.to.Writing.'Goner'.Internet.Worm]
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 8bit

Israeli Youths Confess to Writing 'Goner' Internet Worm

JERUSALEM ‹ Four Israeli teens confessed Saturday to writing and spreading
the "Goner" computer worm that attacked computers worldwide this month,
according to police.

The teens, ages 15 and 16, are high school students in the northern city of
Nahariya, said Meir Zohar, head of the police computer crime squad.

One of the teens confessed to writing the worm and the other youths
confessed to spreading it, Zohar said. All four are in custody and could
face between three and five years in jail if convicted.

The Goner worm looks like an e-mail from a friend, with a subject line of
"Hi," Symantec security response group manager Kevin Haley said.

"The text will say 'How are you? I saw this screensaver and immediately
thought of you.' That's a giveaway," Haley said.

The Goner worm is a hybrid of a traditional computer virus and a hacking
attack. It spreads by going through a computer's e-mail address books and
sending copies of itself out, and by using instant-messaging services like
ICQ to send additional copies. Once inside a user's system, it deletes
anti-virus and firewall programs, then installs scripts to allow hackers to
access the computer and use it as a platform for denial-of-service attacks.

Israeli police have been investigating the case for about a week, Zohar
said.  

The worm first appeared early this month, infecting computers in France and
Germany. 

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Stop Smoking Now
Nicotrol will help
http://us.click.yahoo.com/2vN8tD/_pSDAA/ySSFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 21:00:00 PST