[nsp-sec] new storm worm campaign - april fool's day (AUSCERT#2008a19df)

[Matthew McGlashan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

G'day Jose,

Will sanitise and send on for:

1221    | 124.190.97.199   | 4059            | ASN-TELSTRA Telstra Pty Ltd
9556    | 202.6.148.226    | 15244           | ADAM-AS-AP Adam Internet Pty Ltd
9723    | 220.157.70.139   | 4861            | ISEEK-AS-AP ISEEK Ltd

Would it be ok by you to send this list of sorted asns to AusNOG?  There
might be some operators there that are affected.  

Thanks,

- -- Matthew McGlashan --
Coordination Centre Team Leader             | Hotline: +61 7 3365 4417
Australian Computer Emergency Response Team | Direct:  +61 7 3365 7924
(AusCERT)                                   | Fax:     +61 7 3365 7031
The University of Queensland                | WWW:     www.auscert.org.au
Qld 4072 Australia                          | Email: auscert at auscert.org.au

> same MO as before, with april fool's day campaign.
> 
> funny.exe, kickme.exe and foolsday.exe
> 
> same MD5 for all when fetched at the same time
> 
> new peerlist, decoded and attached.
> 
> -------------------------------------------------------------
> jose nazario, ph.d.     <jose at arbor.net>
> security researcher, office of the CTO,  arbor networks
> v: (734) 821 1427 	      http://asert.arbornetworks.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)
Comment: http://www.auscert.org.au/render.html?it=1967
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBR/GGxSh9+71yA2DNAQItWgP8CIIucUrnU+9Gb1jW5d6lEYEsmm2UpQtN
omq3oEEn99D4OHGyd8f4uLC++HRcSdz9LjfiIoUvt6t952tlFYLJDwsGOWjjC6+R
VH+sPAGfAmvmWgDU/4owEYRVcTfv63OwBLSC+FG3TV1EFFAkGtWKpzavgu8JIJHM
mm63EOXpa1Q=
=QpEa
-----END PGP SIGNATURE-----