Vulnerability Development mailing list archives
lovethingy spread analyses
From: roelof () SENSEPOST COM (Roelof Temmingh)
Date: Fri, 5 May 2000 02:49:41 +0200
Not using the word "love" in subject, because then all the patched mailers will
shit on me because i am trying to spread the lovebug virus...hehehe
Just a quick, short note:
I was thinking about "the virus originated in South East Asia" statement.
Hmmm.. if you look at the spread of the virus, you will find that it coincide
with sunlight. Really. It uses people to spread - to read the email and execute
the attachment, right? And most people need to be awake to read their email
(there's the exception...:)) So if you look at the spread of the virus, you
will see it hitting South EAST Asia, EASTERN Euope, Africa and Europe, and then
the States - thus is travels with the sun. If the reports are coming in from
Australia tomorrow, then we know the *main* spread has travel around the
globe...and it suggests that it all started in the East..It will spin around
the world with the sun..secondary infection in +- 24h?
Just an interesting observation. Maybe someone like the CERTs could provide
very usefull information on reports etc? Anyone on here that has done analyses
of this kind before?
Regards,
Roelof.
------------------------------------------------------
Roelof W Temmingh SensePost IT security
roelof () sensepost com +27 83 448 6996
http://www.sensepost.com
Current thread:
- Re: New worm?, (continued)
- Re: New worm? A.T.Z. (May 04)
- Re: New worm? Sander Smeenk (CistroN Medewerker) (May 04)
- Re: New worm? M J (May 04)
- Re: New worm? Erik Kooijman (May 04)
- email worm, NOT iloveyou Hinken, Brian (May 04)
- Re: New worm? 3APA3A (May 04)
- I Love you virus cure for exchange server NT sven (May 04)
- "I Love You" worm Voodoo Chile (May 04)
- Re: New worm? Ron DuFresne (May 04)
- Re: New worm? Bluefish (May 04)
- lovethingy spread analyses Roelof Temmingh (May 04)
- I love you. Blue Boar (May 04)
- Re: ethernet cards & promisc mode C.J. Oster (May 04)
- Re: ethernet cards & promisc mode Stuart Henderson (May 04)
- Re: ethernet cards & promisc mode Granquist, Lamont (May 04)
- Help me audit a mail filter in C, please? Bennett Todd (May 04)
- Re: ethernet cards & promisc mode David LaPorte (May 04)
- Re: ethernet cards & promisc mode Granquist, Lamont (May 05)
- Re: ethernet cards & promisc mode Bluefish (May 07)
- "I don't think I really love you" Michal Zalewski (May 07)
- Re: ethernet cards & promisc mode Granquist, Lamont (May 07)
