We are receiving reports of malware that's an apparent relative of the lupii worm. The reported variant is named "listen".
Ivan Macalintal, Senior Threat Analyst, Trend Micro Inc., sent us the following information;
"LISTEN has a size of 443,364 bytes, but basically it still does the same thing.
MD5 Hashes (as compared with the previous LUPII variants):
Trend has identified this variant as ELF_LUPPER.B, details of their analysis will be posted there shortly.
Additional information on "listen" has been submitted us by a contributors who wishes to remain anonymous. "Listen" is retrieved from 126.96.36.199 and 188.8.131.52
Thanks very much both of you!
We'll post other details as they develop.
Nov 8th 2005
1 decade ago