Comments on: New MySpace and Facebook Worm Target Social Networks http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/ Ethical Hacking, Penetration Testing & Computer Security Sun, 08 Nov 2009 07:15:43 +0000 http://wordpress.org/?v=2.8.5 hourly 1 By: Navin http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124633 Navin Tue, 19 Aug 2008 11:31:33 +0000 http://www.darknet.org.uk/?p=977#comment-124633 10x U Morgan for the link, but this isn't what I'd initially thought it was :( But do report on how Ur "project" turns out!! :) 10x U Morgan for the link, but this isn’t what I’d initially thought it was :(

But do report on how Ur “project” turns out!! :)

]]> By: Pantagruel http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124628 Pantagruel Tue, 19 Aug 2008 08:46:05 +0000 http://www.darknet.org.uk/?p=977#comment-124628 @Morgan Storey True, the possible finding of a yet to appear piece of software will definitely attract attention. I've had a honeypot running for several month but disconnected it eventually. I got fed up with all the skiddies having a go at it. Our email/web/ssh/etc server still gets attacked twice (on average) a day (ssh brute forcing,dir traverse trials,etc) which gives me enough logs to peruse. have phun with your weekend project ;) @Morgan Storey

True, the possible finding of a yet to appear piece of software will definitely attract attention.

I’ve had a honeypot running for several month but disconnected it eventually. I got fed up with all the skiddies having a go at it. Our email/web/ssh/etc server still gets attacked twice (on average) a day (ssh brute forcing,dir traverse trials,etc) which gives me enough logs to peruse.

have phun with your weekend project ;)

]]> By: Morgan Storey http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124627 Morgan Storey Tue, 19 Aug 2008 08:24:18 +0000 http://www.darknet.org.uk/?p=977#comment-124627 @Navin: Your lucky I have a mind like a steal trap, I remembered what it was called, it only defeats the Netbus trojan attack, so you will need to have your firewall open (nat etc), even then I don't like your chances, this was a worry to me back in 98, but now... http://www.megasecurity.org/Security/netbuster1.31.htm I just thought of one though, as I have seen a lot of VNC traffic hit firewalls and even servers in the past. Simply create a VM, put the 4.11 RealVNC on it (known vulerability that allows no password to be defined by the client) and on the unlocked desktop put a file that you have constructed to do something nasty, then let them at you :P I have a weekend project :P @Navin: Your lucky I have a mind like a steal trap, I remembered what it was called, it only defeats the Netbus trojan attack, so you will need to have your firewall open (nat etc), even then I don’t like your chances, this was a worry to me back in 98, but now…
http://www.megasecurity.org/Security/netbuster1.31.htm

I just thought of one though, as I have seen a lot of VNC traffic hit firewalls and even servers in the past. Simply create a VM, put the 4.11 RealVNC on it (known vulerability that allows no password to be defined by the client) and on the unlocked desktop put a file that you have constructed to do something nasty, then let them at you :P
I have a weekend project :P

]]> By: Navin http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124625 Navin Tue, 19 Aug 2008 07:32:03 +0000 http://www.darknet.org.uk/?p=977#comment-124625 Hey which firewall was that?? Would love to take it on a spin....one of my fave pastimes is bugging skiddies who're constantly on my back!! :) Hey which firewall was that?? Would love to take it on a spin….one of my fave pastimes is bugging skiddies who’re constantly on my back!! :)

]]> By: eM3rC http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124621 eM3rC Tue, 19 Aug 2008 05:29:18 +0000 http://www.darknet.org.uk/?p=977#comment-124621 I understand that people will fall for the nude pics or free games but there are also the people that had their kids set up a facebook profile for them or were convinced by their kids to set up an email. With this in mind, many people will fall for these scams just because they have no knowledge of the computer world, period. This includes random things they get on social networks to getting basic protection for their computer. Knowledge is power and protection, too many people don't have this :P I understand that people will fall for the nude pics or free games but there are also the people that had their kids set up a facebook profile for them or were convinced by their kids to set up an email.

With this in mind, many people will fall for these scams just because they have no knowledge of the computer world, period. This includes random things they get on social networks to getting basic protection for their computer.

Knowledge is power and protection, too many people don’t have this :P

]]> By: Morgan Storey http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124616 Morgan Storey Tue, 19 Aug 2008 00:15:07 +0000 http://www.darknet.org.uk/?p=977#comment-124616 @Navin and Pantagruel: A long time ago I had a firewall that created a fake C drive that an attacker would see if they got through, I filled it with a tiny win95 install and in my documents I had Diablo3_secretdemo.exe which was just a renamed virus I had saved and tweaked so that it basically crashed the target and didn't spread, I only got two skiddies. I watched it in the logs ip blah connected... ip blah change directory, IP blah downloaded Diablo3_secretdemo.exe ip blah uploaded sub7.exe, ip blah dropped connection... hahahah. See not all motivators are sex. Thems where the days though. @Navin: I think a moderated system, or login system would be better. @Darknet: I have been checking out your other blogs, and email is on its way with some ot questions. @Navin and Pantagruel: A long time ago I had a firewall that created a fake C drive that an attacker would see if they got through, I filled it with a tiny win95 install and in my documents I had Diablo3_secretdemo.exe which was just a renamed virus I had saved and tweaked so that it basically crashed the target and didn’t spread, I only got two skiddies. I watched it in the logs ip blah connected… ip blah change directory, IP blah downloaded Diablo3_secretdemo.exe ip blah uploaded sub7.exe, ip blah dropped connection… hahahah.
See not all motivators are sex.
Thems where the days though.

@Navin: I think a moderated system, or login system would be better.

@Darknet: I have been checking out your other blogs, and email is on its way with some ot questions.

]]> By: Navin http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124608 Navin Mon, 18 Aug 2008 14:53:54 +0000 http://www.darknet.org.uk/?p=977#comment-124608 @ Pantagruel needn't be a actor/actress......last yr during the soccer world cup, a worm which was titled "|\|ude Soccer World Cup" infected thousands of users who clicked on it Guess "|\|ude" is the key word BTW Cheers :) And I repeat, Damn the Spam filter!!!!!! :( @ Pantagruel needn’t be a actor/actress……last yr during the soccer world cup, a worm which was titled “|\|ude Soccer World Cup” infected thousands of users who clicked on it

Guess “|\|ude” is the key word

BTW Cheers :)

And I repeat, Damn the Spam filter!!!!!! :(

]]> By: Pantagruel http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124607 Pantagruel Mon, 18 Aug 2008 13:14:09 +0000 http://www.darknet.org.uk/?p=977#comment-124607 Again the human factor is put to the test. Can he/she resist the temptation of opening the attachment from an unknown source, perhaps these finally do contain X-rated pic of the favorite musician/actor/... @Morgan Storey Use the Contact Darknet option www.darknet.org.uk/contact-darknet Again the human factor is put to the test.
Can he/she resist the temptation of opening the attachment from an unknown source, perhaps these finally do contain X-rated pic of the favorite musician/actor/…

@Morgan Storey
Use the Contact Darknet option http://www.darknet.org.uk/contact-darknet

]]> By: Morgan Storey http://www.darknet.org.uk/2008/08/new-myspace-and-facebook-worm-target-social-networks/#comment-124606 Morgan Storey Mon, 18 Aug 2008 12:14:05 +0000 http://www.darknet.org.uk/?p=977#comment-124606 Thanks Navin. Interesting, unfortunately this is just more non-it's getting duped to run something they shouldn't. @Darknet: so where can we submit articles? You have my email address, but I don't have yours (can't find it on the site). PS my offer still stands to assist moderating posts, or heck moderate a forum and move most of the post out of comments. Thanks Navin. Interesting, unfortunately this is just more non-it’s getting duped to run something they shouldn’t.

@Darknet: so where can we submit articles? You have my email address, but I don’t have yours (can’t find it on the site). PS my offer still stands to assist moderating posts, or heck moderate a forum and move most of the post out of comments.

]]>