[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bleeding-sigs
Subject:    Re: [Bleeding-sigs] Warezov catch idea
From:       Michael Scheidell <scheidell () secnap ! net>
Date:       2006-11-14 23:12:30
Message-ID: 455A4D5E.2080003 () secnap ! net
[Download RAW message or body]

Matt Jonkman wrote:
> Playing with a couple warezov samples, I noticed they do a spamhaus
> sbl-xbl lookup to make sure they're not listed.
>
> Anyone think there'd be value in a sig that'd look for spamhaus dns
> lookups from anyone except mail servers?
>
> Matt
>
>   
hey, id even write it, but we are swamped.  darn salesdroids got us
booked up doing audits for clients who decided till NOVEMBER then needed
audits before end of year...


-- 
Michael Scheidell, CTO
SECNAP Network Security / www.secnap.com
scheidell@secnap.net  / 1+561-999-5000, x 1131

_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigs@bleedingthreats.net
http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs
[prev in list] [next in list] [prev in thread] [next in thread]