The Internet Storm Center at SANS is reporting a possible IIS infection. Some websites maybe running malicious Javascript code that redirects a web surfer to a redirected Russian URL that downloads a trojan (msits.exe), including other nasties (spamware related). If the users anti-virus software is updated, these malware should be blocked.

CrystalSky writes "CHICAGO, Illinois (AP) -- Government and industry experts warned late Thursday of a mysterious, large-scale Internet attack against thousands of popular Web sites. The virus-like infection tries to implant hacker software onto the computers of all Web site visitors.

Industry experts and the Homeland Security Department were studying the infection to determine how it spreads across Web sites and find adequate defenses against it.

Users should be aware that any Web site, even those that may be trusted by the user, may be affected by this activity and thus contain potentially malicious code, the government warned in one Internet alert.

The mysterious infection appeared to target at least one recent version of software by Microsoft Corp. to operate Web sites, called its Internet Information Server, popular among businesses and organizations. [ Read More ]"

By John Dickinson

Sender authentication will not stop spam, but other weapons proposed by ASTA might do a lot, and quickly.

Featured Commentary:
Thinking One Thing and Doing Another

by Bill Gray, CCSP Staff Writer
June 24, 2004

Another interesting week and what do we find…
Another week of working and some has been undermined
What started out so fresh, has finished with a thud
Why has all the excitement turned out to be a dud?

A funny thing happened the other day that made me do a little research into why good people slow down. Why their works suffers at times and what can be done about it.

By The Associated Press NEW YORK (AP) _ Millions of America Online customers were hit with junk e-mail after a company insider stole the Internet giant's subscriber list and sold it to spammers, prosecutors say.

AplusWebMaster writes "FYI...(a better idea?):

- http://www.reuters.com/newsArticle.jhtml?type=internetNews&storyID=5484250

June 22, 2004
Consumers who allow their infected computers to send out millions of spam messages could be unplugged from the Internet under a proposal released on Tuesday by six large e-mail providers. Internet users also could be limited on the amount of e-mail they send out each day to ensure they haven't become unwitting spammers, under voluntary guidelines proposed to curb unwanted junk e-mail.
"

AplusWebMaster writes "...M$ is rumored to be the buyer...

Jun. 21, 2004, By Dan Neel

Network Associates is for sale, and Microsoft is rumored to be the buyer. The maker of McAfee antivirus and security products has not made it public, but a for sale sign figuratively hangs from Network Associates' front door, according to Wall Street sources and channel partners. A public announcement concerning either the pending or closed sale of the company to a buyer could come as early as July 1 when Network Associates also plans to announce layoffs associated with the company's for-sale status, these sources said. "

WatchRight writes " Child Pornography on the Internet--What to do? By Robert T DeMarco If you are a parent of a child between the ages of 10-17 it is likely that your child is receiving unsolicited pornographic images. These are typically sent by “bots” to everyone who enters a chat room where children congregate. If you don’t believe this then all you need to do is set up a profile describing yourself as a 14 year old and start entering a few chat rooms. It will not be long before you will start getting bombarded by unsolicited instant messages (IMs) with embedded hyperlinks that lead to pornography. It also won’t be long before you receive IMs from anonymous strangers asking you what you are wearing and asking questions of a sexual nature. Some of these anonymous strangers are adults disguised as kids looking for vulnerable or inquisitive kids. "

Tech and Security Headlines: 06-20-04

Software lodged in your PC follows your Web wanderings and slings up relevant pitches