Re: re [Hampshire] OpenOffice worm affects linux systems

トップ ページ

このメッセージに返信
著者: Vic
日付:  
To: hampshire
題目: Re: re [Hampshire] OpenOffice worm affects linux systems
> Certainly an interesting if not original vector. Sophos has more info:-
>
> http://www.sophos.com/security/analyses/sbbadbunnya.html


"SB/BadBunny-A spreads by dropping malicious script files that affect the
behavior of the popular IRC programs mIRC and X-Chat, causing them send
SB/BadBunny-A to other users. These malicious script files are named
badbunny.py (for XChat) and script.ini (for mIRC, overwriting the existing
mIRC file) and are also detected as SB/BadBunny-A."

So it'll be defeated by SELinux, then...

Vic.