[ Date Index ]
[ Thread Index ]
[ <= Previous by date /
thread ]
[ Next by date /
thread => ]
Re: [LUG] PHP Worm traffic?
- To: list@xxxxxxxxxxxxx
- Subject: Re: [LUG] PHP Worm traffic?
- From: Martijn Grooten <dcglug@xxxxxxxxxxxxxxxxxx>
- Date: Tue, 17 Dec 2013 20:35:15 +0000 (UTC)
- Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=lapsedordinary.net; s=mail; t=1387312516; bh=/LKbQE+FcmjH48wosBIqBHXr5mjtCSFU3889gWFc2P8=; h=Date:From:To:Subject:In-Reply-To:Message-ID:References: MIME-Version:Content-Type; b=k5S1dmhuYJn4Bv7xjeOLGErC8DWEXNsqDMM213iFJy+xNWYmL2HbAYEJuWLQHrcr6 H7wc6HcN99DxLf1dpT4ulPuY4jOadEu3ch460FpzMK806QTxbIv/PSL7fEP+C6/DPr J5yR29/58f/ms6WgmFiDP76J0dK/7D/YXYrhTRoA=
Speaking of PHP worms, here's someone having set up a honeypot to see what
happened when attackers exploit old PHP vulnerabilities on a Linux server:
http://sempersecurus.blogspot.com/2013/12/a-forensic-overview-of-linux-perlbot.html
Martijn.
--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq
