Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: SAV botnet revival ? SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
SAV botnet revival ?

It seems like there is a revival going on of the botnet exploiting the Symantec Anti-Virus vulnerability. It was originally reported on by Joel on Nov 27th.

But the traffic scanning for port 2967 is back. It seems new Command and Control centers are active for it as well.



--
Swa Frantzen -- Section 66

 Swa

760 Posts
Subscribe Dec 12th 2006
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!