[nsp-sec] dlink router worm or dlink compromise leads toinfectedPCs?

[Rob Thomas]

Hey, Don.

> Rob, can I assume it is the busybox application they are replacing in
> order add their tools/worm?

You can assume that, but I can't prove that.  :)  We're still not yet 
certain of the method of compromise or installation.  The miscreant has 
grown much more tight-lipped since his claimed sales increased.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.team-cymru.org/
ASSERT(coffee != empty);