OpenOffice worm Badbunny hops across operating systems

[Jeffrey McCright]

Its for real. Funny thing is, this worm launches DOS attacks with 5K ICMP 
packets against anti-virus websites....  Hmmmm....  Seems like you would 
want to attack websites of people less prepared and less knowledgeable about 
virus detection and DOS attacks. But then, I really don't know much about 
writing worms and DOS attacks, so what do I know???



Jeffrey A. McCright, A+
816-210-3107
jmccright at hotmail.com





>From: betelgeuse67stang at yahoo.com
>To: kclug at kclug.org
>Subject: OpenOffice worm Badbunny hops across operating systems
>Date: Mon, 11 Jun 2007 13:18:14 -0700 (PDT)
>MIME-Version: 1.0
>Received: from kclug.org ([139.146.133.42]) by bay0-mc9-f5.bay0.hotmail.com 
>with Microsoft SMTPSVC(6.0.3790.2668); Mon, 11 Jun 2007 13:18:40 -0700
>Received: from localhost (localhost.localdomain [127.0.0.1])by kclug.org 
>(Postfix) with ESMTP id B2846704E86;Mon, 11 Jun 2007 15:18:39 -0500 (CDT)
>Received: from kclug.org ([127.0.0.1])by localhost (kclug.org [127.0.0.1]) 
>(amavisd-new, port 10024)with ESMTP id TrwJCMqlluOu; Mon, 11 Jun 2007 
>15:18:39 -0500 (CDT)
>Received: from kclug.org (localhost.localdomain [127.0.0.1])by kclug.org 
>(Postfix) with ESMTP id 00FF0704E77;Mon, 11 Jun 2007 15:18:38 -0500 (CDT)
>Received: from localhost (localhost.localdomain [127.0.0.1])by kclug.org 
>(Postfix) with ESMTP id 2CE51704E73for <kclug at kclug.org>; Mon, 11 Jun 2007 
>15:18:37 -0500 (CDT)
>Received: from kclug.org ([127.0.0.1])by localhost (kclug.org [127.0.0.1]) 
>(amavisd-new, port 10024)with ESMTP id 6Rw9aNXDrnip for 
><kclug at kclug.org>;Mon, 11 Jun 2007 15:18:37 -0500 (CDT)
>Received: from alias3.c17-ave-mta1.cnet.com 
>(alias3.c17-ave-mta1.cnet.com[216.239.114.133]) by kclug.org (Postfix) with 
>ESMTP id A23A4704E71for <kclug at kclug.org>; Mon, 11 Jun 2007 15:18:36 -0500 
>(CDT)
>Received: from c17-sha-netscaler-active.cnet.com (HELO 
>c18-btg-app1.cnet.com)([216.239.113.140])by alias3.c17-ave-mta1.cnet.com 
>with ESMTP; 11 Jun 2007 20:18:30 +0000
>Received: from c18-btg-app1.cnet.com (localhost.localdomain [127.0.0.1])by 
>c18-btg-app1.cnet.com (Postfix) with ESMTP id A346E83C03Dfor 
><kclug at kclug.org>; Mon, 11 Jun 2007 13:18:14 -0700 (PDT)
>X-Message-Info: 
>txF49lGdW40pJlm7JkOhaRyOKJEIt5xzB/BPAM240R7QUMrkX28koXMcrEdhSbqL
>X-Original-To: kclug at kclug.org
>Delivered-To: kclug at kclug.org
>X-BeenThere: kclug at kclug.org
>X-Mailman-Version: 2.1.9
>Precedence: list
>List-Id: KCLUG mailing list <kclug.kclug.org>
>List-Unsubscribe: 
><http://kclug.org/mailman/listinfo/kclug>,<mailto:kclug-request at kclug.org?subject=unsubscribe>
>List-Archive: <http://kclug.org/pipermail/kclug>
>List-Post: <mailto:kclug at kclug.org>
>List-Help: <mailto:kclug-request at kclug.org?subject=help>
>List-Subscribe: 
><http://kclug.org/mailman/listinfo/kclug>,<mailto:kclug-request at kclug.org?subject=subscribe>
>Errors-To: kclug-bounces at kclug.org
>Return-Path: kclug-bounces at kclug.org
>X-OriginalArrivalTime: 11 Jun 2007 20:18:40.0944 (UTC) 
>FILETIME=[B3AC5B00:01C7AC65]
>
>This ZDNN (http://news.zdnet.com/) story has been sent to you from 
>betelgeuse67stang at yahoo.com, who added this comment:
>
>Can this be nothing but FUD or something more serious? You make the call...
>
>OpenOffice worm Badbunny hops across operating systems
>By Munir Kotadia
>
>Malicious software, spreading through OpenOffice documents, "can infect 
>Windows, Linux and Mac OS X systems," Symantec says.
>
>http://news.zdnet.com/2100-1009_22-6189961.html?tag=sas.email
>
>Read all technology news from this week:
>http://www.news.com/thisweeksheadlines/
>
>--------------------------------
>Copyright 2005 CNET Networks, Inc. All rights reserved.
>CNET Networks, Inc.
>235 Second Street
>San Francisco, CA 94105
>U.S.A.
>_______________________________________________
>Kclug mailing list
>Kclug at kclug.org
>http://kclug.org/mailman/listinfo/kclug

_________________________________________________________________
Get a preview of Live Earth, the hottest event this summer - only on MSN 
http://liveearth.msn.com?source=msntaglineliveearthhm