Return-Path: <sentto-279987-1174-988653298-fc=all.net@returns.onelist.com> Delivered-To: fc@all.net Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Mon, 30 Apr 2001 10:55:08 -0700 (PDT) Received: (qmail 14077 invoked by uid 510); 30 Apr 2001 16:56:07 -0000 Received: from mu.egroups.com (64.211.240.238) by 204.181.12.215 with SMTP; 30 Apr 2001 16:56:07 -0000 X-eGroups-Return: sentto-279987-1174-988653298-fc=all.net@returns.onelist.com Received: from [10.1.4.55] by mu.egroups.com with NNFMP; 30 Apr 2001 17:54:58 -0000 X-Sender: tony_mht@hotmail.com X-Apparently-To: iwar@yahoogroups.com Received: (EGP: mail-7_1_2); 30 Apr 2001 17:54:57 -0000 Received: (qmail 83143 invoked from network); 30 Apr 2001 17:54:57 -0000 Received: from unknown (10.1.10.26) by l9.egroups.com with QMQP; 30 Apr 2001 17:54:57 -0000 Received: from unknown (HELO hotmail.com) (64.4.15.38) by mta1 with SMTP; 30 Apr 2001 17:54:56 -0000 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 30 Apr 2001 10:54:56 -0700 Received: from 63.208.82.227 by lw10fd.law10.hotmail.msn.com with HTTP; Mon, 30 Apr 2001 17:54:55 GMT X-Originating-IP: [63.208.82.227] To: iwar@yahoogroups.com Message-ID: <F38Dd3OJXsNQptgFrYI00004d8c@hotmail.com> X-OriginalArrivalTime: 30 Apr 2001 17:54:56.0017 (UTC) FILETIME=[AA653010:01C0D19E] From: "mo haitao" <tony_mht@hotmail.com> Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com Delivered-To: mailing list iwar@yahoogroups.com Precedence: bulk List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com> Date: Mon, 30 Apr 2001 13:54:55 -0400 Reply-To: iwar@yahoogroups.com Subject: [iwar] Advisory of NIPC Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit ADVISORY 01-009 "Increased Internet Attacks Against U.S. Web Sites and Mail Servers Possible in Early May" Issued 04/26/2001 Citing recent events between the United States and the People's Republic of China (PRC), malicious hackers have escalated web page defacements over the Internet. This communication is to advise network administrators of the potential for increased hacker activity directed at U.S. systems during the period of April 30, 2001 to May 7, 2001. Chinese hackers have publicly discussed increasing their activity during this period, which coincides with dates of historic significance in the PRC: May 1 is May Day; May 4 is Youth Day; and, May 7 is the anniversary of the accidental bombing of the Chinese Embassy in Belgrade. To date, hackers already have unlawfully defaced a number of U.S. web sites, replacing existing content with pro-Chinese or anti-U.S. rhetoric. In addition, the NIPC previously reported on an Internet worm named "Lion" that is infecting computers and installing distributed denial of service (DDOS) tools on various systems. Analysis of the Lion worm's source code reveals that, when illegally exploited, it sends password files from the victim site to an email address located in China. For more information on the Lion DDOS tool, refer to NIPC Advisory 01-005. As a result of the activity already seen, together with public statements threatening increased illegal activity, network and system administrators are encouraged to more closely monitor their web sites and mail servers during April 30, 2001 through May 7, 2001 for attacks that could include web page defacements and denial-of-service attacks. Recipients of this advisory are encouraged to report computer intrusions to their local FBI office (http://www.fbi.gov/contact/fo/fo.htm) or the NIPC, and to other appropriate authorities. Incidents may be reported online at http://www.NIPC.gov/incident/cirr.htm. The NIPC Watch and Warning Unit can be reached at (202) 323-3204/3205/3206 or NIPC.Watch@fbi.gov. http://www.nipc.gov/warnings/advisories/2001/01-009.htm Tony April 29,2001 _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com ------------------ http://all.net/ Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
This archive was generated by hypermail 2.1.2 : 2001-06-30 21:44:09 PDT