Return-Path: <sentto-279987-4038-1008007204-fc=all.net@returns.groups.yahoo.com> Delivered-To: fc@all.net Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Mon, 10 Dec 2001 10:01:08 -0800 (PST) Received: (qmail 28215 invoked by uid 510); 10 Dec 2001 18:00:26 -0000 Received: from n10.groups.yahoo.com (216.115.96.60) by all.net with SMTP; 10 Dec 2001 18:00:26 -0000 X-eGroups-Return: sentto-279987-4038-1008007204-fc=all.net@returns.groups.yahoo.com Received: from [216.115.97.163] by n10.groups.yahoo.com with NNFMP; 10 Dec 2001 18:00:07 -0000 X-Sender: m1@maglan-lab.com X-Apparently-To: iwar@yahoogroups.com Received: (EGP: mail-8_0_1_2); 10 Dec 2001 18:00:04 -0000 Received: (qmail 16395 invoked from network); 10 Dec 2001 18:00:03 -0000 Received: from unknown (216.115.97.171) by m9.grp.snv.yahoo.com with QMQP; 10 Dec 2001 18:00:03 -0000 Received: from unknown (HELO heimdall.inter.net.il) (192.114.186.17) by mta3.grp.snv.yahoo.com with SMTP; 10 Dec 2001 18:00:05 -0000 Received: from mohhnadyashin (diup-183-40.inter.net.il [213.8.183.40]) by heimdall.inter.net.il (Mirapoint) with SMTP id BCC15769; Mon, 10 Dec 2001 19:59:58 +0200 (IST) Message-ID: <003301c1819b$25b6b750$0200000a@mohhnadyashin> To: <iwar@yahoogroups.com> References: <200112100430.fBA4UP708841@red.all.net> X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MIMEOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 From: "M1" <m1@maglan-lab.com> Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com Delivered-To: mailing list iwar@yahoogroups.com Precedence: bulk List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com> Date: Mon, 10 Dec 2001 18:34:28 +0200 Subject: Re: [iwar] [fc:Israeli.Youths.Confess.to.Writing.'Goner'.Internet.Worm] Reply-To: iwar@yahoogroups.com Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit As I wrote about 2 years ago . "Israel can be defines as a 'world greenhouse' for computer virus, vandals and trojans.most of the malicious code to be save at 'private collections' while a fraction to be sophisticatedly distribute in wild, mainly via 'internet covert channels' . -------------------------------------------- Blitzblau Shai MAGLAN - Information Warfare Research Lab ----- Original Message ----- From: Fred Cohen <fc@all.net> To: Information Warfare Mailing List <iwar@onelist.com> Sent: Monday, December 10, 2001 6:30 AM Subject: [iwar] [fc:Israeli.Youths.Confess.to.Writing.'Goner'.Internet.Worm] > Israeli Youths Confess to Writing 'Goner' Internet Worm > > JERUSALEM < Four Israeli teens confessed Saturday to writing and spreading > the "Goner" computer worm that attacked computers worldwide this month, > according to police. > > The teens, ages 15 and 16, are high school students in the northern city of > Nahariya, said Meir Zohar, head of the police computer crime squad. > > One of the teens confessed to writing the worm and the other youths > confessed to spreading it, Zohar said. All four are in custody and could > face between three and five years in jail if convicted. > > The Goner worm looks like an e-mail from a friend, with a subject line of > "Hi," Symantec security response group manager Kevin Haley said. > > "The text will say 'How are you? I saw this screensaver and immediately > thought of you.' That's a giveaway," Haley said. > > The Goner worm is a hybrid of a traditional computer virus and a hacking > attack. It spreads by going through a computer's e-mail address books and > sending copies of itself out, and by using instant-messaging services like > ICQ to send additional copies. Once inside a user's system, it deletes > anti-virus and firewall programs, then installs scripts to allow hackers to > access the computer and use it as a platform for denial-of-service attacks. > > Israeli police have been investigating the case for about a week, Zohar > said. > > The worm first appeared early this month, infecting computers in France and > Germany. > > > ------------------ > http://all.net/ > > Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ > > ------------------------ Yahoo! Groups Sponsor ---------------------~--> Stop Smoking Now Nicotrol will help http://us.click.yahoo.com/2vN8tD/_pSDAA/ySSFAA/kgFolB/TM ---------------------------------------------------------------------~-> ------------------ http://all.net/ Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
This archive was generated by hypermail 2.1.2 : 2001-12-31 21:00:00 PST