Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Yet Another Bagle - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Yet Another Bagle
Several readers wrote to tell us that they have seen another round of Bagle today.  This one has an attached file with various names, so far we've seen
Avis.zip
Danyell.zip
Edward.zip
Ellen.zip
George.zip
Isabel.zip
Judithe.zip
Katherine.zip
Leonarde.zip
Michael.zip
Mychaell.zip
Robert.zip
Rycharde.zip
Sara.zip
Suzanna.zip

All of the attachments are 6k in size and contain a file with a name like 123.exe or 1.exe.  Most of the major AV vendors have signatures out, so make sure that you are keeping your machines updated.

Marcus

301 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!