Archive for January, 2007

EXE Storm Of the Year

January 25, 2007 by Jose Nazario

Last week I got a weird piece of malware, one that didn’t quite look familiar. A quick round of dynamic and static analysis showed that it was indeed new, and it turns out it was the malware known as the Storm Worm. AV detection, late Thursday night last week, was pretty weak, and I went [...]

Read More

ISP Security BOF @NANOG 39

January 13, 2007 by Danny McPherson

NANOG 39 is February 4-7, 2007 in Toronto, looking forward to seeing many of you folks there. I’ll again be moderating the ISP Security BOF (a loosely managed gathering of mostly network security operations folk). We’ve got a couple of discussion topics on the agenda at the moment: The root of a log: Extracting Intelligence [...]

Read More