Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

MySQL Bot has infected a few thousand systems

An update of the new MySQL Bot attack:

http://isc.sans.org//diary.php?date=2005-01-27

MySQL Bot

A "bot", exploiting vulnerable MySQL installs on Windows systems, has been spotted. It infected a few thousand systems so far. Like typical for bots, infected systems will connect to an IRC server. The IRC server will instruct them to scan various networks for other vulnerable mysql servers.