Re: [Full-Disclosure] Heads up: Possible lsass worm in the wild

["morning_wood" <se_cur_ity@xxxxxxxxxxx>]

i think the importaint thing here is that this was dropped via an lsass exploit,
not that it is a specific type of viral agent ( agobot ) included in the drop.

for those interested in a sample, it may be obtained at
http://exploit.nothackers.org/msiwin84-lsass.zip

morning_wood
http://exploitlabs.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html