Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: Announcing ISCAlert - Email Worms Bog Down ISPs - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Announcing ISCAlert - Email Worms Bog Down ISPs
Announcing ISCAlert

Tom Liston, Internet Storm Center handler, and author of LaBrea ( ) has just released ISCAlert. Per Tom, "ISCAlert is a small program that monitors the SANS Institute?s Internet Storm Center (ISC) and displays an icon in the system-tray indicating the current ?Infocon? level. The ISC?s Infocon status is used to reflect changes in malicious traffic and the possibility of disrupted connectivity on the Internet. Information on the meanings of the various Infocon levels can be found at ."

ISCAlert is available for Microsoft Windows platforms here:

(Note: the MD5 sum of the file "ISCAlert.exe" is 0081f58c7887d29891e7cea5ef8034f8)

Email Worms Bog Down ISPs

The ISC has received reports of several major ISPs suffering delays in the delivery of email due to a recent surge in worm activity. The specific worms referenced are Sober.H/Ascetic.A and Erkez/Zafi.B. You may remember Sober.H as being the source of large amounts of German-language political spam ( as reported here: ). The volume of email created by these two worms beginning late last week slowed many mail servers to a crawl, creating a backlog of undelivered (but not undeliverable) mail. As the tide of email created by these two worms begins to recede, queued mail should be delivered and delivery times should return to normal.


Cory Altheide, stunt-double for Dan Goldberg

Handler on Duty

42 Posts
Jun 18th 2004

Sign Up for Free or Log In to start participating in the conversation!