[nsp-sec] ATTN Google - Malware on a Googlegroups (list of some sources)

[SURFcert - Peter]

Hi Scott,

Scott A. McIntyre wrote on 11-May-10 8:29:

> What do we know about the malware that is spewing this stuff out?  I've
> noticed some interesting patterns about how and when it arrives, and in
> the sources.
> 
> I tend to be sceptical about coincidences and noticed that this all
> kicked off about the same time as Brian mentioned what appeared to be
> new Storm type malware variant.  Perhaps unrelated, but, well...

I have seen this for about a week now. At least this version. In the
month before that I have had approximate the same kinds of messages but
in those cases the setup.zip was attached to the e-mail. We are blocking
that since then.

-- 
Peter Peters
SURFcert Officer on Duty
cert at surfnet.nl                            http://cert.surfnet.nl/
office-hours: +31 302 305 305    emergency (24/7): +31 622 923 564

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 543 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20100511/4bce14a6/attachment-0001.sig>