Re: Python has arrived!

2014-11-07 Thread Steve Hayes
On Thu, 6 Nov 2014 15:22:45 + (UTC), Grant Edwards
invalid@invalid.invalid wrote:

According to 
http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:

  Attacks occur in two phases. Hackers first infect a targeted
   machine via simple malware that installs Python onto the device,
   [...]
   

404: Page not found


-- 
Steve Hayes from Tshwane, South Africa
Web:  http://www.khanya.org.za/stevesig.htm
Blog: http://khanya.wordpress.com
E-mail - see web page, or parse: shayes at dunelm full stop org full stop uk

-- 
https://mail.python.org/mailman/listinfo/python-list


Re: Python has arrived!

2014-11-07 Thread Heinz Schmitz
Steve Hayes wrote:

According to 
http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:

  Attacks occur in two phases. Hackers first infect a targeted
   machine via simple malware that installs Python onto the device,
   [...]

[Fri, 07 Nov 2014 06:54:54 +0200]
404: Page not found

2014-11-07 10:06 MEZ   - Page found.

Regards,
H.


-- 
https://mail.python.org/mailman/listinfo/python-list


Re: Python has arrived!

2014-11-07 Thread Gregory Ewing

Steve Hayes wrote:

On Thu, 6 Nov 2014 15:22:45 + (UTC), Grant Edwards
invalid@invalid.invalid wrote:


According to 
http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:


404: Page not found


Works if you remove the spurious colon from the end of the url.

--
Greg
--
https://mail.python.org/mailman/listinfo/python-list


Python has arrived!

2014-11-06 Thread Grant Edwards
According to 
http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:

  Attacks occur in two phases. Hackers first infect a targeted
   machine via simple malware that installs Python onto the device,
   [...]
   
-- 
Grant Edwards   grant.b.edwardsYow! I always have fun
  at   because I'm out of my
  gmail.commind!!!
-- 
https://mail.python.org/mailman/listinfo/python-list


Re: Python has arrived!

2014-11-06 Thread Sturla Molden
Grant Edwards invalid@invalid.invalid wrote:
 According to
 http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:
 
   Attacks occur in two phases. Hackers first infect a targeted
machine via simple malware that installs Python onto the device,
[...]


A virus that runs on Python. It had to happen sooner or later.

-- 
https://mail.python.org/mailman/listinfo/python-list


Re: Python has arrived!

2014-11-06 Thread Ian Kelly
On Nov 6, 2014 10:47 PM, Sturla Molden sturla.mol...@gmail.com wrote:

 Grant Edwards invalid@invalid.invalid wrote:
  According to
 
http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots
:
 
Attacks occur in two phases. Hackers first infect a targeted
 machine via simple malware that installs Python onto the device,
 [...]
 

 A virus that runs on Python. It had to happen sooner or later.

It's not a Python virus. The infection vector can be anything. The
interesting part is that they're using browser automation to open a
real-time, encrypted, virtually undetectable and untraceable channel to the
malware over a port (443) that is frequently used and very rarely blocked,
via a host (gmail.com) that is also frequently used and rarely blocked (and
there would likely be plenty of alternatives to choose from if it were),
and without needing to create any sort of server on the target machine. The
fact that Python is involved is incidental.
-- 
https://mail.python.org/mailman/listinfo/python-list