Exploit code raises Windows worm alarm

TalkBack 33 of 57:

Next »

« Previous

• Thread View
• Flat View

Count your blessings...

The attack I described was not subtle in the least bit and wasn't a worm. Someone was showing off by making a point...thus a script kiddie. Real hackers wouldn't even be noticed without a thorough security audit, since their techniques rarely get noticed by system admins.

Script kiddies are recognizable mostly by their desire to have bragging rights for coming up with the latest exploits and advertising it all over the world. To be the first to code an exploit is the race they are in and drives their motivation. The fact is that they must be increasingly sophisticated in order to find and exploit flaws such as found in Windows or other OS's.

The tools in the hands of script kiddies are very sophisticated. The tools are drag&drop with any exploit package with configurable payloads. This is a far cry from the tedious command prompt methods of old where you hand to have a deep understanding of what you are doing in order to succeed.

The mark of a genuine hacker, besides the ethics involved that contrasts them from criminals who using hacking techniques to pick our pockets and steal personal identities, is that in general they don't do much bragging and are not motivated by a perception of "fame".

Either your network has for one reason or another escaped the notice of the hacker underground, or isn't of interest to hackers in general, or escalation of prividges has taken place and you are unaware of it. Just because you haven't seen anything doesn't mean it hasn't happened to your network.

"Pride goeth before the fall." As for being jealous, post your network IP on some hacker website and I am sure that the attention you seek will come your way. Be careful that you don't get what you ask for. And when it does I am sure that your bosses wouldn't be too happy that you provoked the party.

There is no such thing as an invulnerable system or network...never has been and never will be.

Posted by: cburgess   Posted on: 10/18/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now