Re: [Full-Disclosure] kaspersky-labs webserver or listserver compromised?

2002-11-08 Thread Ka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At Freitag, 8. November 2002 16:20 Brian McWilliams wrote: > Man, we would be lost without these early warning systems. Hehe. .o) In this case we wouldn't get the virusses without them. That was a clear home-run for the anti-security-industry folks.

Re: [Full-Disclosure] kaspersky-labs webserver or listserver compromised?

2002-11-08 Thread Brian McWilliams
I could be wrong, but I'm guessing someone on Kaspersky's Virus News list got infected with the Braid/Brida worm, and the worm forwarded a copy to the Kaspersky listserver at [EMAIL PROTECTED] Instead of dropping the infected message, the misconfigured listserv appears to have forwarded it to

Re: [Full-Disclosure] kaspersky-labs webserver or listserver compromised?

2002-11-08 Thread Ka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At Freitag, 8. November 2002 08:56 Andreas Tirok wrote: > Ka <[EMAIL PROTECTED]> wrote: > > Here are the headers: > > > > - - BEGIN HEADERS - > > Received: from webserver2.kaspersky-labs.com (unknown

Re: [Full-Disclosure] kaspersky-labs webserver or listserver compromised?

2002-11-08 Thread Andreas Tirok
On Thu, 7 Nov 2002 23:25:07 +0100 Ka <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Just received an email with some virus components > from kaspersky-labs.com. .o) > > Possible Exploit.IFrame.FileDownload > and a README.EXE with I-Worm.Bridex >

[Full-Disclosure] kaspersky-labs webserver or listserver compromised?

2002-11-07 Thread Ka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just received an email with some virus components from kaspersky-labs.com. .o) PossibleExploit.IFrame.FileDownload and a README.EXE with I-Worm.Bridex Here are the headers: - - BEGIN HEADERS --