Security Incidents: Re: sureseeker.com

From: Sloan, Scott (CIT) <SloanS_at_MAIL.NIH.GOV>
Date: Mon, 6 Nov 2000 13:54:30 -0500

Sureseeker is a JavaScript Trojan that uses the ActiveX Control security
vulnerabilities that were announced by Microsoft in MS-99-032 on August 31,
1999.

You can find more information at the FedCIRC website.

Scott W. Sloan
NIH/CIT/DNST
Federal Bldg., Rm. 416
7550 Wisconsin Ave., MSC 9110
Bethesda, MD 20892
(301) 402-6538 Voice
(301) 480-6041 Fax
mailto:sloan.scott_at_nih.gov

-----Original Message-----
From: Ken Grossman [mailto:ken.grossman_at_GSA.GOV]
Sent: Monday, November 06, 2000 9:24 AM
To: INCIDENTS_at_SECURITYFOCUS.COM
Subject: Re: sureseeker.com

Does anyone have more detailed information on this "trojan" then what is
provided on the F-Secure website and what Ms. McPherson and Mr. Waddoups
have in their e-mails. I have people wondering if it uses JAVA, ActiveX,
or JavaScript. Any information would be a big help. Thanks.

Ken Grossman
Received on Nov 08 2000