Security Incidents: Re: sureseeker.com

["Sloan, Scott (CIT)" <SloanS () MAIL NIH GOV>]

Sureseeker is a JavaScript Trojan that uses the ActiveX Control security
vulnerabilities that were announced by Microsoft in MS-99-032 on August 31,
1999.

You can find more information at the FedCIRC website.

Scott W. Sloan
NIH/CIT/DNST
Federal Bldg., Rm. 416
7550 Wisconsin Ave., MSC 9110
Bethesda, MD  20892
(301) 402-6538  Voice
(301) 480-6041  Fax
mailto:sloan.scott () nih gov


-----Original Message-----
From: Ken Grossman [mailto:ken.grossman () GSA GOV]
Sent: Monday, November 06, 2000 9:24 AM
To: INCIDENTS () SECURITYFOCUS COM
Subject: Re: sureseeker.com


Does anyone have more detailed information on this "trojan" then what is
provided on the F-Secure website and what Ms. McPherson and Mr. Waddoups
have in their e-mails.  I have people wondering if it uses JAVA, ActiveX,
or JavaScript.  Any information would be a big help.  Thanks.

Ken Grossman