Re: Virus/trojan tunnel out from behind firewall?

[Ryan Russell <ryan () securityfocus com>]

On Sun, 24 Feb 2002, David Carmean wrote:

> Have there been any cases of a trojan/virus/etc tunnelling out from
> behind a firewall and thus providing an attacker a way into the
> "chewy center"?

Sure.  All of the trojans that log onto IRC and await commands do that.
Others that download components from a website under the authors control
do that in a way, as well.

                                                Ryan


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com