Lovgate
Published: 2008/07/18
なぜいまごろ?
______________________________________________________________________________ To: *****@yahoo.co.uk Subject: Mail Delivery System From: *****@yahoo.co.uk Date: Fri, 18 Jul 2008 05:51:21 +0900 ______________________________________________________________________________ Attachment: document.pif
とか
______________________________________________________________________________ To: *****@*****.game.org Subject: Mail Transaction Failed From: *****@***.biglobe.ne.jp Date: Fri, 18 Jul 2008 05:22:40 +0900 ______________________________________________________________________________ The message contains Unicode characters and has been sent as a binary attachment. Attachment: data.scr
とか。
今朝大量にハニーポットからの送信が観測されました。Lovegateが添付されてます。1時間で600通弱ですので大規模化する兆候ではないですが。
0807180500/bins7UWYXme0b.bin: Worm.Lovgate.X FOUND 0807180500/bin98wszFNB1P.bin: Worm.Lovgate.X FOUND 0807180500/binG5MUuEMWtw.bin: Worm.Lovgate.X FOUND 0807180500/binfPPa72x4pB.bin: Worm.Lovgate.X FOUND 0807180500/bin9ruG0bLhhq.bin: Worm.Lovgate.X FOUND 0807180500/binOeyt0PRjVx.bin: Worm.Lovgate.X FOUND 0807180500/binBsmUSRWsEA.bin: Worm.Lovgate.X FOUND 0807180500/bin1aKqDqPIrA.bin: Worm.Lovgate.X FOUND 0807180500/binmNISH50F2r.bin: Worm.Lovgate.X FOUND 0807180500/binX8qrSkwjh3.bin: Worm.Lovgate.X FOUND 0807180500/binfPTzcngU8a.bin: Worm.Lovgate.X FOUND 0807180500/bin7iCsQ6nhRv.bin: Worm.Lovgate.X FOUND 0807180500/binRJOmj4KPSA.bin: Worm.Lovgate.X FOUND 0807180500/binROgweF5g5h.bin: Worm.Lovgate.X FOUND 0807180500/binMlLUkbXc7W.bin: Worm.Lovgate.X FOUND 0807180500/bindPCbOpYblF.bin: Worm.Lovgate.X FOUND 0807180500/binbQmzKUf2th.bin: Worm.Lovgate.X FOUND 0807180500/bin9HHUuxeyYt.bin: Worm.Lovgate.X FOUND 0807180500/bin7UNQwEXyui.bin: Worm.Lovgate.X FOUND 0807180500/biny7w4N04YzQ.bin: Worm.Lovgate.X FOUND
by jyake