Strangle them with their own network cables!

[major_clanger]

Gah. 380 copies of the latest net worm in the last 18 hours. Fortunately, my ISP runs Brightmail and is deleting them, so I actually get 380 "message was infected with X, cannot be repaired and was deleted" mails rather than the actual worm. And I use a third-party mail and news reader anyway. But still, reading mail does feel like wading to work through a flood.

DoubleplusGah, and flaming napalm death to malware writers :-<

MC

Comments

[blufive.livejournal.com]

Indeed. My "quiet" account, the one which gets used least, has had abot 20-30 of 'em in the last 24 hours. At ~150k a pop, I'm glad I'm on broadband.

Our demon account has yet to see a single one, but then demon have probably got something serious upstream of us taking them all out...

[antonia-tiger.livejournal.com]

Demon don't seem to be doing anything, and I'm seeing 700+ overnight. Seems to be aimed at addresses which post to netnews, as well as email address books.

It's getting addresses in Reply-To headers.

First sightings reported Sept 14, and the exploion seemed to come overnight, Thursday/Friday. One outgoing message will hit multiple targets.

[papersky.livejournal.com]

My Vif account is running at about 320 in 24 hours. I too have smart mail deleting, and I'm running Linux anyway, but I discovered to my horror that my smart mail deleting can only hold a certain quantity of deleted mail at a time -- which seems to be twenty of these things. So when I get up in the morning I have to manually delete them twenty at a time, clearing "trash" in between.

It reminds me of when we had an invasion of mogrags/slaters/woodlice in Swansea, and I got fed up and put poison down and then had to sweep up thousands of dead mogrags by the back door every morning before I'd even had a cup of tea.

Grr

[autopope.livejournal.com]

I got back from a trip down south (I bought a car: behold, I am become Guardian-reading Volvo Man, bringer of suburban boredom!) to find the load average on my CoLo box was up around 75. It was that fucking worm. I've now barred all messages of >135Kb in size and the load average is back down to 0.1, where it belongs. Took me half an hour just to log on via ssh ...

This is a Linux box. No chance of any infection, but the worm is multiplying so fast that it amounts to a DDoS attack anyway.

[green-amber.livejournal.com]

Well I haven't seen a hair of this, which is interesting. Am I being saved by Norton, Zone Alarm or the uni's sub to Spamhaus do you think???