Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: Wi-Fi Worm Rumors SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Wi-Fi Worm Rumors
A couple of diligent readers pointed us to this initial report of a worm attacking Windows XP boxes, spreading only through Wi-fi, not the Internet.  While it hasn't been confirmed (nothing is confirmed until we get packets or code!), it's an intriguing possibility.  The first I heard about this concept was several years ago, over Thai food and beers with a fellow handler, whom I won't name.  Okay? his name is an anagram of "A JUG HIS WORTH."  Any way, Mr. JUG mentioned the possibility of a worm that attacks via wireless and leaves the Internet alone for a while.  That way, it would miss our detection mechanisms for a while, as it spreads in airports, coffee houses, and urban centers.  Perhaps we are facing such a thing now, or perhaps not.  Something wicked might be brewing in Newark, New Jersey.
Ed

57 Posts
Sep 23rd 2005

Sign Up for Free or Log In to start participating in the conversation!