Infected Mind

I think by now most of people related to VX-scene read what Peter Ferrie wrote on Symantec Security Response Blog .

I thought of it too, vx-scene is dying in my perspective and in old retired elite the scene is already dead,because of the lack of real asm or at least complicated codes.

see these two links from the past(29A#6)

Z0MBiE
Benny

Imagine , that the whole vx-scene dying gossip was from that time 2001.

For me I think the scene still have the chance to revive but it needs real vxer who

 Will not  feel  okey until they create.. ---- from Z0MBiE article.

Lets wait to see the new combined zine,and hope for future new creative vxers.

After a very boring weak for a grinch type of person! things seem a bit moving:

-First , The storm worm on their xmas propagation try, used Fast-Flux technique but this time the IP changed every 1sec! I made myself a list of IPs by making a loop lasted for about 7 min ,Most of the IPs I got are unique,makes me wonder how many zombies did they jam into that attack! In the same occasion I got my own binary copy of storm worm (at last).

-Second, Read the rest of this entry »

Using CamFrog as a way to get into free live porn ,isnt my real treat. Especially when that product has such Stratup key to run:

“C:\Program Files\Camfrog\Camfrog Video Chat\CamfrogNet.exe” 0 C:\Program Files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe

I think the idea is straight forward! (“minimize” will be passed to that program)

Now..the good news Read the rest of this entry »

While I was dusting the internet pages I came across an old article about virus underground,interesting indeed! I recalled it ,as once this link have been published before on rrlf site, yet I chose to read it all over again!

The Virus Underground[New York Times]

I am wondering now about the odd pictures ,why is SPTH seems to be half naked! whats wrong with benny did they took his picture by surprise! May be I reach the answer when I read the whole article, which I doubt to find .

Read the rest of this entry »

As the 11th of November passed, and nothing happened of what is been claimed by e-jihadist, I was curious as I was reading avers’ blog posts about the whole thing.
First I wanted to reach that site “al-jinan.net” but as avers reported it was offline,so I checked the jo-uf.net(from f-secure analyses), and dnsstuff.com showed that that this domain refere to 127.0.0.1 ,localhost so it is not yet activated or not even will be activated.
The funny thing the host was registered to a guy from Iraq, which shows that he registered the domain in 2002!! Iraq was still under Saddam grip,and no internet was there till beginning of 2003,so how on earth would that happen.
Consulting a cyber friend about the dnsstuff.com information he told me that the names of the region supplied doesnt seem to be Iraqi more prone to be Egyptian!

So,what would that supposed to be ,was they really trying to DoS sites using that tool on their site’s users,would the users be that dumb to run a totally suspicious program on their computers?! The guys were so cocky about their site not going to go offline this time! as I found in google’s cached pages,well they were wrong, internet is not Tura Bura! and another thing made me wonder what if such tools worked in fishing style in name of e-(holly-wars), what the legal notice from avers would be! should they(law enforcement)  arrest users using that kinda of tool

Maybe the whole thing was a hoax to get media attention or it might be intelligence way of action from some anti-terrorists fighting countries to get ip of suspects!
Either ways,the e-attacks( I mean DDoS) could still be manageable ,it doesnt need a rocket science to create such a havoc,but would it cause that great impact! see DoS attacks curried in eastern Europe, for that .

Note: These words were written from someone whois so pissed off from religious guys,they suck people will, money,power in name of god to get their fat asses thicker, and that person provided these info as it is.

.586
.model flat,stdcall
option casemap:none
include \masm32\include\kernel32.inc
include \masm32\include\user32.inc
include \masm32\include\windows.inc

includelib \masm32\lib\kernel32.lib
includelib \masm32\lib\user32.lib

.data
sample db “hello world!”,0

.code
start:
xor eax,eax
push eax
push offset sample
push offset sample
push eax
call MessageBoxA
ret
end start