A new Linux worm
Posted Feb 21, 2006 19:05 UTC (Tue) by smoogen
In reply to: A new Linux worm
Parent article: A new Linux worm
The shell script is Bash and the executable it downloads is Linux only... so in this case if you are running Apache on Windows.. you are home clear.
From what I can tell this variant has been around since Feb 14th. The infected bot boxes do a scan for various vulnerabilities.. and then downloads the worm onto the box. It then executes the worm and listens for commands from the boss-bot.
As always.. your OS is only as good as you can AND will patch it :)
to post comments)