04 May 2004

Sasser worm family continues to spread "The Sasser worm outbreak that began early Saturday morning continues... The fourth variant, Sasser.d, which started appearing this morning also added a component to use pings (ICMP echo requests) to scan for other hosts to infect. It can generate more than 30 packets/sec with no payload. On a network with many unpatched systems, this could lead to network congestion similar to what was seen when Nachi came out last August. A reminder, that systems patched against the issues described in MS04-011 are not vulnerable to this worm. If you haven't patched yet, do so immediately." 12:21:21 PM      comment ? []

SANS Portal Security Webcasts Bluetooth Wireless Featuring: Joshua Wright Wednesday, May 5, 2004 1:00pm EDT (1700 UTC) Internet Storm Center: Threat Update and The Email Fraud Threat Featuring: Johannes Ullrich Wednesday, May 12, 2004 2:00pm EDT (1800 UTC) 8:20:38 AM      comment ? []