It's only a matter of time . . .

[George Toft]

From SANS:
The NIMDA worm is spreading faster than Code Red, appears to have at
least four distinct propagation mechanisms, and infects hosts running
most versions of Windows. In other words it is a far more vicious worm
than Code Red. The network activity caused by the worm has resulted
in effective denial of service attacks at many sites. I've included
this morning's complete report from Incidents.org at the end of this
Newsbites issue. Updates to the report can be found at
http://www.incidents.org/react/nimda.php

Now, let's see how long it takes some miscrant to combine this
infection method with a BIOS nuker (CIH Virus), a monitor killer
(one that monkeys with the H & V refresh settings), and is written
in 100% assembly so it runs under Linux also (W32.Winux).  This 
will result in something that kills your monitor ($$$), cannot be
easily removed by the average person without buying a new MOBO ($$$), 
and spreads to everything.  With 200,000 people replacing their 
computers and monitors, it should jumpstart the economy, right?

*This* would make nimda look wimpy.


George