[iwar] Advisory of NIPC

From: mo haitao (tony_mht@hotmail.com)
Date: 2001-04-30 10:54:55


Return-Path: <sentto-279987-1174-988653298-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Mon, 30 Apr 2001 10:55:08 -0700 (PDT)
Received: (qmail 14077 invoked by uid 510); 30 Apr 2001 16:56:07 -0000
Received: from mu.egroups.com (64.211.240.238) by 204.181.12.215 with SMTP; 30 Apr 2001 16:56:07 -0000
X-eGroups-Return: sentto-279987-1174-988653298-fc=all.net@returns.onelist.com
Received: from [10.1.4.55] by mu.egroups.com with NNFMP; 30 Apr 2001 17:54:58 -0000
X-Sender: tony_mht@hotmail.com
X-Apparently-To: iwar@yahoogroups.com
Received: (EGP: mail-7_1_2); 30 Apr 2001 17:54:57 -0000
Received: (qmail 83143 invoked from network); 30 Apr 2001 17:54:57 -0000
Received: from unknown (10.1.10.26) by l9.egroups.com with QMQP; 30 Apr 2001 17:54:57 -0000
Received: from unknown (HELO hotmail.com) (64.4.15.38) by mta1 with SMTP; 30 Apr 2001 17:54:56 -0000
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 30 Apr 2001 10:54:56 -0700
Received: from 63.208.82.227 by lw10fd.law10.hotmail.msn.com with HTTP;	Mon, 30 Apr 2001 17:54:55 GMT
X-Originating-IP: [63.208.82.227]
To: iwar@yahoogroups.com
Message-ID: <F38Dd3OJXsNQptgFrYI00004d8c@hotmail.com>
X-OriginalArrivalTime: 30 Apr 2001 17:54:56.0017 (UTC) FILETIME=[AA653010:01C0D19E]
From: "mo haitao" <tony_mht@hotmail.com>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Mon, 30 Apr 2001 13:54:55 -0400
Reply-To: iwar@yahoogroups.com
Subject: [iwar] Advisory of NIPC
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

ADVISORY 01-009
"Increased Internet Attacks Against U.S. Web Sites and Mail Servers Possible
in Early May"
Issued 04/26/2001
Citing recent events between the United States and the People's Republic of
China (PRC), malicious hackers have escalated web page defacements over the
Internet. This communication is to advise network administrators of the
potential for increased hacker activity directed at U.S. systems during the
period of April 30, 2001 to May 7, 2001. Chinese hackers have publicly
discussed increasing their activity during this period, which coincides with
dates of historic significance in the PRC: May 1 is May Day; May 4 is Youth
Day; and, May 7 is the anniversary of the accidental bombing of the Chinese
Embassy in Belgrade.
To date, hackers already have unlawfully defaced a number of U.S. web sites,
replacing existing content with pro-Chinese or anti-U.S. rhetoric. In
addition, the NIPC previously reported on an Internet worm named "Lion" that
is infecting computers and installing distributed denial of service (DDOS)
tools on various systems. Analysis of the Lion worm's source code reveals
that, when illegally exploited, it sends password files from the victim site
to an email address located in China. For more information on the Lion DDOS
tool, refer to NIPC Advisory 01-005.
As a result of the activity already seen, together with public statements
threatening increased illegal activity, network and system administrators
are encouraged to more closely monitor their web sites and mail servers
during April 30, 2001 through May 7, 2001 for attacks that could include web
page defacements and denial-of-service attacks.
Recipients of this advisory are encouraged to report computer intrusions to
their local FBI office (http://www.fbi.gov/contact/fo/fo.htm) or the NIPC,
and to other appropriate authorities. Incidents may be reported online at
http://www.NIPC.gov/incident/cirr.htm. The NIPC Watch and Warning Unit can
be reached at (202) 323-3204/3205/3206 or NIPC.Watch@fbi.gov.

http://www.nipc.gov/warnings/advisories/2001/01-009.htm

Tony
April 29,2001

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com


------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-06-30 21:44:09 PDT