Phatbot and stealthy polymorphic Alphabot Soup
"Phatbot" is essentially an "alias" label used by some AV vendors for a Trojan and it's also a name assigned to a particular Trojan analyzed by the LURHQ Threat Intelligence Group. These Trojans - Phatbot, Polybot, Agobot Gaobot, SDBot, RandBot .... which have similar functionality and purpose, are "lumped together" by some AV Vendors into families of Trojans. Most of these Trojans can trace their roots to powerful warez Trojans that have plagued University network environments for a number of years (groundbreaking threat analysis was done Dave Dittrich at the University of Washington and others). In addition all of the "Agobot"'s should be thrown in as relatives, after all what's in a name. The variants released in later 2003 and 2004 include true Internet worm functionality enabled by Microsoft vulnerabilities associated with Ports 135, 445, and 80.
Read more: http://isc.sans.org/diary.html?date=2004-03-18
Cameras that make great holiday gifts
Let them start the new year with a step up in photo and video quality from a phone.