[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Beware of the "ANTS Version 3.0" Worm

To: Andrew Whitaker <andrew@cs.washington.edu>
Subject: Re: Beware of the "ANTS Version 3.0" Worm
From: Patrick Tullmann <tullmann@cs.utah.edu>
Date: Sun, 28 Oct 2001 15:57:06 -0700
Cc: Jay Lepreau <lepreau@cs.utah.edu>, Craig Milo Rogers <Rogers@ISI.EDU>, janos-discuss@fast.cs.utah.edu, David Wetherall <djw@cs.washington.edu>, dmaughan@darpa.mil
In-Reply-To: <232F025C30E77A47A4244196BE034F07303EF3@exchsrv1.cseresearch.cs.washington.edu>
References: <232F025C30E77A47A4244196BE034F07303EF3@exchsrv1.cseresearch.cs.washington.edu>
Sender: owner-janos-discuss@fast.cs.utah.edu
User-Agent: Mutt/1.3.22i

The worm is a spoof of a different ANTS.

ANTS2 is trojan detector: http://www.avnetwork.de/ants/.  The v3.0
worm is more likely a spoof of that ANTS than our ANTS.  the ANTS3
worm well-known and documented.  See, for instance:
     http://www.akomm-hstollreiter.de/ants/analysis.php

-Pat

----- ----- ---- ---  ---  --   -    -      -         -               -
Pat Tullmann                                       tullmann@cs.utah.edu
		     "Forty-Two." -- Deep Thought

References:
- RE: Beware of the "ANTS Version 3.0" Worm
  - From: "Andrew Whitaker" <andrew@cs.washington.edu>

Prev by Date: RE: Beware of the "ANTS Version 3.0" Worm
Next by Date: Route Exchange App failure
Prev by thread: RE: Beware of the "ANTS Version 3.0" Worm
Next by thread: Route Exchange App failure

[ Janos ] [ OSKit ] [ Network Testbed ] [ Flick ] [ Fluke ]
Flux Research Group / Department of Computer Science / University of Utah