Ius Sanctus Nieuws Archief

Code Red voorbij, nu Nimda.A@mm

Wednesday, 19 Sep 2001 door Joachim

Er is weer een nieuw Worm Virus dat sinds 18 september toeslaat.
----
New virus first detected Monday. Now called W32/Nimda.A@mm

http://www.nipc.gov/warnings/advisories/2001/01-021.htm
----

Van bovengenoemde site:

----
On September 12, 2001, a group of hackers named the Dispatchers claimed they had already begun network operations against information infrastructure components such as routers. The Dispatchers stated they were targeting the communications and finance infrastructures. They also predicted that they would be prepared for increased operations on or about Tuesday, September 18, 2001.
----

onderstaande logs tonen aan dat dit klopt:

Op 10/Sep/2001 hadden we 10 Code Red attacks
Op 10/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 11/Sep/2001 hadden we 12 Code Red attacks
Op 11/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 12/Sep/2001 hadden we 6 Code Red attacks
Op 12/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 13/Sep/2001 hadden we 5 Code Red attacks
Op 13/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 14/Sep/2001 hadden we 6 Code Red attacks
Op 14/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 15/Sep/2001 hadden we 6 Code Red attacks
Op 15/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 16/Sep/2001 hadden we 5 Code Red attacks
Op 16/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 17/Sep/2001 hadden we 8 Code Red attacks
Op 17/Sep/2001 hadden we 0 Nimda.A@mm attacks
Op 18/Sep/2001 hadden we 6 Code Red attacks
Op 18/Sep/2001 hadden we 2119 Nimda.A@mm attacks

Uiteraard zijn we, M$ vrij als we zijn, vrij ongevoelig voor serveraanvallen...

Joachim.