SANS ISC: Possible NetDevil Scanning, RH Linux 7.1, 7.2, 7.3 and 8.0 End-of-Life

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS ISC InfoSec Forums

Possible NetDevil Scanning



The Internet Storm Center has noted a concurrent rise in scans for ports 901, 902, and 903. This is consistent with the default ports used by the NetDevil (Backdoor-RP) trojan for control, keylogging communication, and file transfer. If anyone monitors outbound traffic to these ports, please notify us: http://isc.sans.org/contact.html


More information on the NetDevil trojan can be found at:



http://securityresponse.symantec.com/avcenter/venc/data/backdoor.netdevil.html


http://vil.nai.com/vil/content/v_99295.htm




Red Hat Linux 7.1, 7.2, 7.3 and 8.0 end-of-life



As per their support policy, RedHat Software has announced that RedHat Linux 7.1, 7.2, 7.3 and 8.0 have reached their errata maintenance end-of-life.



RedHat will no longer be producing security, bugfix, or enhancement updates for these products. Note also, that Red Hat Linux 9 reaches its end of life on April 30, 2004.



Those of you running these systems should consider migrating to newer versions.




-----------------------------------------------------

Handler on Duty: Tom Liston - http://www.labreatechnologies.com