Re: NIMDA - ceased ? -

["Jay D. Dyson" <jdyson () treachery net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 26 Dec 2002, Tomo wrote: 

> Is NIMDA (GET /scripts/..%252f../winnt/system32 ...something)  ceased? 
> 04:54, Dec. 23 UTC is the last access of them, around here.
>
> Any comments ? 

        We should be so lucky.  I'm still getting Nimda scans here.  Got
around a dozen attacks on the day after Xmas, too.

        Nimda isn't dead.  It's taking a nap.

- -Jay

   (    (                                                         _______
   ))   ))   .-"There's always time for a good cup of coffee."-.   >====<--.
 C|~~|C|~~| (>------ Jay D. Dyson - jdyson () treachery net ------<) |    = |-'
  `--' `--'  `How about a 10-day waiting period on YOUR rights?'  `------'

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (TreacherOS)
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iD8DBQE+DJShTqL/+mXtpucRAq3fAKDCveegwFKnltwNYRZlUps3G2zvsQCdEufD
gso4o5gSAtQR8fqvrOTbQQA=
=ujoH
-----END PGP SIGNATURE-----


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com