cNotes 検索 一覧 カテゴリ

Lovgate

Published: 2008/07/18

なぜいまごろ?

 ______________________________________________________________________________
      To: *****@yahoo.co.uk
      Subject: Mail Delivery System
      From: *****@yahoo.co.uk
      Date: Fri, 18 Jul 2008 05:51:21 +0900
 ______________________________________________________________________________
  
   Attachment: document.pif

とか

 ______________________________________________________________________________
      To: *****@*****.game.org
      Subject: Mail Transaction Failed
      From: *****@***.biglobe.ne.jp
      Date: Fri, 18 Jul 2008 05:22:40 +0900
 ______________________________________________________________________________
 
 The message contains Unicode characters and has been sent as a binary  
 attachment.
 
   Attachment: data.scr

とか。

今朝大量にハニーポットからの送信が観測されました。Lovegateが添付されてます。1時間で600通弱ですので大規模化する兆候ではないですが。

 0807180500/bins7UWYXme0b.bin: Worm.Lovgate.X FOUND
 0807180500/bin98wszFNB1P.bin: Worm.Lovgate.X FOUND
 0807180500/binG5MUuEMWtw.bin: Worm.Lovgate.X FOUND
 0807180500/binfPPa72x4pB.bin: Worm.Lovgate.X FOUND
 0807180500/bin9ruG0bLhhq.bin: Worm.Lovgate.X FOUND
 0807180500/binOeyt0PRjVx.bin: Worm.Lovgate.X FOUND
 0807180500/binBsmUSRWsEA.bin: Worm.Lovgate.X FOUND
 0807180500/bin1aKqDqPIrA.bin: Worm.Lovgate.X FOUND
 0807180500/binmNISH50F2r.bin: Worm.Lovgate.X FOUND
 0807180500/binX8qrSkwjh3.bin: Worm.Lovgate.X FOUND
 0807180500/binfPTzcngU8a.bin: Worm.Lovgate.X FOUND
 0807180500/bin7iCsQ6nhRv.bin: Worm.Lovgate.X FOUND
 0807180500/binRJOmj4KPSA.bin: Worm.Lovgate.X FOUND
 0807180500/binROgweF5g5h.bin: Worm.Lovgate.X FOUND
 0807180500/binMlLUkbXc7W.bin: Worm.Lovgate.X FOUND
 0807180500/bindPCbOpYblF.bin: Worm.Lovgate.X FOUND
 0807180500/binbQmzKUf2th.bin: Worm.Lovgate.X FOUND
 0807180500/bin9HHUuxeyYt.bin: Worm.Lovgate.X FOUND
 0807180500/bin7UNQwEXyui.bin: Worm.Lovgate.X FOUND
 0807180500/biny7w4N04YzQ.bin: Worm.Lovgate.X FOUND

[カテゴリ:spam観察日記]

by jyake