<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
	>
<channel>
	<title>Comments on: Any ANI File Could Infect You!</title>
	<atom:link href="http://ddos.arbornetworks.com/2007/03/any-ani-file-could-infect-you/feed/" rel="self" type="application/rss+xml" />
	<link>http://ddos.arbornetworks.com/2007/03/any-ani-file-could-infect-you/</link>
	<description>A weblog dedicated to educating the community on security threats that matter</description>
	<lastBuildDate>Sun, 29 Jan 2012 02:23:23 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: Philosophically Secure &#187; Blog Archive &#187; The Microsoft .ANI Vulnerability</title>
		<link>http://ddos.arbornetworks.com/2007/03/any-ani-file-could-infect-you/comment-page-1/#comment-225966</link>
		<dc:creator>Philosophically Secure &#187; Blog Archive &#187; The Microsoft .ANI Vulnerability</dc:creator>
		<pubDate>Fri, 04 Sep 2009 18:06:40 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/#comment-225966</guid>
		<description>[...] Arbor Networks sees it being exploited in the wild [...]</description>
		<content:encoded><![CDATA[<p>[...] Arbor Networks sees it being exploited in the wild [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Diane</title>
		<link>http://ddos.arbornetworks.com/2007/03/any-ani-file-could-infect-you/comment-page-1/#comment-208325</link>
		<dc:creator>Diane</dc:creator>
		<pubDate>Wed, 06 May 2009 13:07:42 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/#comment-208325</guid>
		<description>It sounds like you&#039;re creating problems yourself by trying to solve this issue instead of looking at why their is a problem in the first place.</description>
		<content:encoded><![CDATA[<p>It sounds like you&#8217;re creating problems yourself by trying to solve this issue instead of looking at why their is a problem in the first place.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jacqui</title>
		<link>http://ddos.arbornetworks.com/2007/03/any-ani-file-could-infect-you/comment-page-1/#comment-13123</link>
		<dc:creator>Jacqui</dc:creator>
		<pubDate>Tue, 10 Apr 2007 14:31:25 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/#comment-13123</guid>
		<description>Also this is being hosted on domains yata.com.au and spybiz4u.com and possibly a number of others for use in drive by downloads.  I&#039;ve just found your advisory after coming from an affected forum and confirmed the yata domain by searching for the .exe file on there via a remote program.</description>
		<content:encoded><![CDATA[<p>Also this is being hosted on domains yata.com.au and spybiz4u.com and possibly a number of others for use in drive by downloads.  I&#8217;ve just found your advisory after coming from an affected forum and confirmed the yata domain by searching for the .exe file on there via a remote program.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: R. Kerns</title>
		<link>http://ddos.arbornetworks.com/2007/03/any-ani-file-could-infect-you/comment-page-1/#comment-12416</link>
		<dc:creator>R. Kerns</dc:creator>
		<pubDate>Fri, 06 Apr 2007 17:31:01 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/#comment-12416</guid>
		<description>Of course after some review of the discovered exploit code what do I see in reporting TODAY! Really find it funny as I am a World of Warcrack player as well...

From BBC reporting at http://news.bbc.co.uk/2/hi/technology/6526851.stm

&quot;Analysis of that malicious software showed that it lay dormant on a victims machine until they ran World of Warcraft (WoW) at which point it captured login data and sent it to the hacking group. &quot; &quot;Research by security firm Symantec suggests that the raw value of a WoW account is now higher than a credit card and its associated verification data. 

One card can be sold for up to $6 (£3) suggests Symantec, but a WoW account will be worth at least $10. An account that has several high level characters associated with it could be worth far more as the gold and rare items can be sold for real cash. &quot;</description>
		<content:encoded><![CDATA[<p>Of course after some review of the discovered exploit code what do I see in reporting TODAY! Really find it funny as I am a World of Warcrack player as well&#8230;</p>
<p>From BBC reporting at <a href="http://news.bbc.co.uk/2/hi/technology/6526851.stm" rel="nofollow">http://news.bbc.co.uk/2/hi/technology/6526851.stm</a></p>
<p>&#8220;Analysis of that malicious software showed that it lay dormant on a victims machine until they ran World of Warcraft (WoW) at which point it captured login data and sent it to the hacking group. &#8221; &#8220;Research by security firm Symantec suggests that the raw value of a WoW account is now higher than a credit card and its associated verification data. </p>
<p>One card can be sold for up to $6 (£3) suggests Symantec, but a WoW account will be worth at least $10. An account that has several high level characters associated with it could be worth far more as the gold and rare items can be sold for real cash. &#8220;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Magically Delicious &#187; The Microsoft .ANI Vulnerability</title>
		<link>http://ddos.arbornetworks.com/2007/03/any-ani-file-could-infect-you/comment-page-1/#comment-12194</link>
		<dc:creator>Magically Delicious &#187; The Microsoft .ANI Vulnerability</dc:creator>
		<pubDate>Thu, 05 Apr 2007 16:35:06 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/#comment-12194</guid>
		<description>[...] Arbor Networks sees it being exploited in the wild [...]</description>
		<content:encoded><![CDATA[<p>[...] Arbor Networks sees it being exploited in the wild [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

