Re: [cobalt-users] [RaQ3] A tale about an OS update, bind and a worm

[flash22@xxxxxxx]

On Mon, 3 Sep 2001, Per M Knutsen wrote:

> Here's a lesson for ya'all:
> Let me make it straight: this is the first time I've ever been hacked (erm,
> knowing I've been hacked...). I was preparing for impending doom. I soon

heh....2 days ago i answered your dns post with:

>>Are you sure you didn't get hacked or something? you have very strange
>>things on your machine ;)

Seems like you did indeed.....sigh

There is probably another machine on / near your colo that is spewing worm
data, it would only take minutes to get hit after the accidental
downgrade....you might hint that your colo should sniff a bit to check for
other machines....i have seen it happen before :(

gsh