Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Sample needed - of Spybot.ZIF, which scans for vulnerable Cisco Routers SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Sample needed - of Spybot.ZIF, which scans for vulnerable Cisco Routers
According to Symantec, W32.Spybot.ZIF "allows a remote attacker" to, among other things, "Scan a specified network range for Cisco routers that may have vulnerable Telnet or HTTP servers running and report results back to IRC."

If anyone catches a sample of this one please upload it through our contact page. Thanks!
Patrick

193 Posts
Nov 2nd 2005

Sign Up for Free or Log In to start participating in the conversation!