Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Mr O
Recently I have seen more MBR infections. Probably more so in the last few months than the last several years. Not common although I saw a security comment about a newer botnet totaling over 4 million PCs. While Linux is prone to rootkits I've heard very little about MBR infections on Linux. I

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Mr O
Hey now, OS X has their share of malware. My favorite was the recent one where they changed the name to bypass the patch. Personally I think one of the biggest security threats is the end user. Anytime something is point and click to run you're hosed! ((insert nparker comment about Slackware her

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread abrown
I was implying no such thing. The current infection targeted Windoze only. So windoze is the only OS currently vulnerable to *this* specific attack. My impression of Mr O's response was that the MBR attack was irrelevant to us. (That impression may have been incorrect.) I was merely saying that

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread larry price
How malware is categorized on different platforms is an interesting social phenomenon. On windows, it's a virus even if it coaxes a user into downloading and clicking a dialogue box to ok it's installation. On Linux or Mac it would be considered a trojan... and your own damn fault if you allowed

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Timothy J. Wiley
Thank you. On Thu, Jun 30, 2011 at 4:21 PM, Ben Barrett wrote: > I'm afraid that statement is simply not true, Ed! > Malware developers work on MANY platforms, ranging from handheld devices to > power-plant-control systems. > Windows may still be the primary target platform, but *certainly* not

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Bob Crandell
Here is an example: http://www.theregister.co.uk/2011/06/27/mission_impossible_mouse_attack/ >>> Ben Barrett 6/30/2011 04:21 PM >>> I'm afraid that statement is simply not true, Ed! Malware developers work on MANY platforms, ranging from handheld devices to power-plant-control systems. Wind

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Ben Barrett
I'm afraid that statement is simply not true, Ed! Malware developers work on MANY platforms, ranging from handheld devices to power-plant-control systems. Windows may still be the primary target platform, but *certainly* not the only one!! There exists malware for Linux, and for OS X, etc. Malware

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Edward Craig
Well, Windows is the only platform malware authors develop for. When they get around to Linux we'll know Linux has arrived. I have never seen malware, myself, but I've been using non-Windows PCs since 1997. On Thu, Jun 30, 2011 at 13:28, Timothy J. Wiley wrote: > So you're implying that only Wind

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Timothy J. Wiley
So you're implying that only Windows is currently vulnerable to attacks? Wow. On Thu, Jun 30, 2011 at 1:04 PM, wrote: > Neither. I am talking about the next generation infection which > installs a VM under your OS. There has been talk of this for > a while, but so far as I know none yet exists

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread abrown
Neither. I am talking about the next generation infection which installs a VM under your OS. There has been talk of this for a while, but so far as I know none yet exists. But installing in the MBR is a critical element of any such VM infection. -- Allen Brown abrown at peak.org http://brown.

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Mr O
Well then, tonights goal will be to assemble a linux box, install Virtualbox, install XP, try like heck to get infected outside of the VM. Could even go so far as to install Windows on Windows to try! --- On Thu, 6/30/11, Timothy J. Wiley wrote: From: Timothy J. Wiley Subject: Re: [Eug-lug] B

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Timothy J. Wiley
Vulnerable to what? This particular infection or infections in general? On Thu, Jun 30, 2011 at 11:04 AM, wrote: > This seems like a small step away from booting into a virtual > machine. At that point all OSs are vulnerable, not just > Windoze. > -- > Allen Brown abrown at peak.org http://b

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread abrown
This seems like a small step away from booting into a virtual machine. At that point all OSs are vulnerable, not just Windoze. -- Allen Brown abrown at peak.org http://brown.armoredpenguin.com/~abrown/ Plug-and-Play is really nice, unfortunately it only works 50% of the time. To be specifi

Re: [Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Mr O
Nothing new here. Move along. --- On Thu, 6/30/11, Allen Brown wrote: > From: Allen Brown > Subject: [Eug-lug] Bot infection stored in MBR > To: "Eugene Unix and Gnu/Linux User Group" > Date: Thursday, June 30, 2011, 10:34 AM > http://www.bbc.co.uk/news/technology-13973805 > -- > Allen Brown

[Eug-lug] Bot infection stored in MBR

2011-06-30 Thread Allen Brown
http://www.bbc.co.uk/news/technology-13973805 -- Allen Brown abrown at peak.org http://brown.armoredpenguin.com/~abrown/ Is there another word for synonym? --- George Carlin ___ EUGLUG mailing list euglug@euglug.org http://www.euglug.org/mailman/li